# changelog

author: Augusto Caringi <acaringi@redhat.com> [5.14.0-582.el9]
changelog:
  - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-88093]
  - docs: move x86 documentation into Documentation/arch/ (Waiman Long) [RHEL-68940]
  - x86: Add missing code to arch/x86/include/asm/linkage.h (Waiman Long) [RHEL-68940]
  - jump_label: Fix static_key_slow_dec() yet again (Waiman Long) [RHEL-68940]
  - jump_label: Fix the fix, brown paper bags galore (Waiman Long) [RHEL-68940]
  - jump_label: Simplify and clarify static_key_fast_inc_cpus_locked() (Waiman Long) [RHEL-68940]
  - jump_label: Clarify condition in static_key_fast_inc_not_disabled() (Waiman Long) [RHEL-68940]
  - jump_label: Fix concurrency issues in static_key_slow_dec() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Use the correct length when optimizing NOPs (Waiman Long) [RHEL-68940]
  - x86/alternatives: Sort local vars in apply_alternatives() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Optimize optimize_nops() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Get rid of __optimize_nops() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Use a temporary buffer when optimizing NOPs (Waiman Long) [RHEL-68940]
  - x86/alternatives: Catch late X86_FEATURE modifiers (Waiman Long) [RHEL-68940]
  - x86/percpu: Use __force to cast from __percpu address space (Waiman Long) [RHEL-68940]
  - x86/percpu: Unify arch_raw_cpu_ptr() defines (Waiman Long) [RHEL-68940]
  - jump_label,module: Don't alloc static_key_mod for __ro_after_init keys (Waiman Long) [RHEL-68940]
  - x86/bpf: Fix IP for relocating call depth accounting (Waiman Long) [RHEL-68940]
  - x86/alternatives: Move apply_relocation() out of init section (Waiman Long) [RHEL-68940]
  - x86/percpu: Avoid sparse warning with cast to named address space (Waiman Long) [RHEL-68940]
  - x86/traps: Use current_top_of_stack() helper in traps.c (Waiman Long) [RHEL-68940]
  - x86/percpu: Fix "const_pcpu_hot" version generation failure (Waiman Long) [RHEL-68940]
  - x86/callthunks: Correct calculation of dest address in is_callthunk() (Waiman Long) [RHEL-68940]
  - x86/smp: Use atomic_try_cmpxchg in native_stop_other_cpus() (Waiman Long) [RHEL-68940]
  - x86/smp: Move the call to smp_processor_id() after the early exit in native_stop_other_cpus() (Waiman Long) [RHEL-68940]
  - x86/percpu: Declare const_pcpu_hot as extern const variable (Waiman Long) [RHEL-68940]
  - x86/paravirt: Remove no longer needed paravirt patching code (Waiman Long) [RHEL-68940]
  - x86/callthunks: Mark apply_relocation() as __init_or_module (Waiman Long) [RHEL-68940]
  - x86/callthunks: Fix and unify call thunks assembly snippets (Waiman Long) [RHEL-68940]
  - x86/callthunks: Handle %rip-relative relocations in call thunk template (Waiman Long) [RHEL-68940]
  - x86/percpu: Define PER_CPU_VAR macro also for !__ASSEMBLY__ (Waiman Long) [RHEL-68940]
  - x86/percpu: Return correct variable from current_top_of_stack() (Waiman Long) [RHEL-68940]
  - x86/percpu: Introduce const-qualified const_pcpu_hot to micro-optimize code generation (Waiman Long) [RHEL-68940]
  - x86/percpu: Introduce %rip-relative addressing to PER_CPU_VAR() (Waiman Long) [RHEL-68940]
  - x86/percpu, xen: Correct PER_CPU_VAR() usage to include symbol and its addend (Waiman Long) [RHEL-68940]
  - x86/percpu: Correct PER_CPU_VAR() usage to include symbol and its addend (Waiman Long) [RHEL-68940]
  - x86/fpu: Clean up FPU switching in the middle of task switching (Waiman Long) [RHEL-68940]
  - x86/percpu: Use the correct asm operand modifier in percpu_stable_op() (Waiman Long) [RHEL-68940]
  - x86/percpu: Use C for arch_raw_cpu_ptr(), to improve code generation (Waiman Long) [RHEL-68940]
  - x86/percpu: Rewrite arch_raw_cpu_ptr() to be easier for compilers to optimize (Waiman Long) [RHEL-68940]
  - x86/percpu: Disable named address spaces for KASAN (Waiman Long) [RHEL-68940]
  - x86/percpu: Use C for percpu read/write accessors (Waiman Long) [RHEL-68940]
  - x86/percpu: Use compiler segment prefix qualifier (Waiman Long) [RHEL-68940]
  - x86/percpu: Enable named address spaces with known compiler version (Waiman Long) [RHEL-68940]
  - x86/callthunks: Use EXPORT_PER_CPU_SYMBOL_GPL() for per CPU variables (Waiman Long) [RHEL-68940]
  - x86/paravirt: Make BUG_func() usable by non-GPL modules (Waiman Long) [RHEL-68940]
  - x86/alternative: Correct feature bit debug output (Waiman Long) [RHEL-68940]
  - x86/paravirt: Switch mixed paravirt/alternative calls to alternatives (Waiman Long) [RHEL-68940]
  - x86/alternative: Add indirect call patching (Waiman Long) [RHEL-68940]
  - x86/paravirt: Move some functions and defines to alternative.c (Waiman Long) [RHEL-68940]
  - x86/paravirt: Introduce ALT_NOT_XEN (Waiman Long) [RHEL-68940]
  - x86/alternatives: Sync core before enabling interrupts (Waiman Long) [RHEL-68940]
  - arch: Remove cmpxchg_double (Waiman Long) [RHEL-68940]
  - x86,intel_iommu: Replace cmpxchg_double() (Waiman Long) [RHEL-68940]
  - x86,amd_iommu: Replace cmpxchg_double() (Waiman Long) [RHEL-68940]
  - locking/atomic: Correct (cmp)xchg() instrumentation (Waiman Long) [RHEL-68940]
  - arm64: cmpxchg_double*: hazard against entire exchange variable (Waiman Long) [RHEL-68940]
  - jump_label: Prevent key->enabled int overflow (Waiman Long) [RHEL-68940]
  - jump_label: Use atomic_try_cmpxchg() in static_key_slow_inc_cpuslocked() (Waiman Long) [RHEL-68940]
  - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). (Guillaume Nault) [RHEL-57031]
  - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (Hangbin Liu) [RHEL-84573]
  - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Hangbin Liu) [RHEL-84573] {CVE-2025-22005}
  - net: ipv6: fix dst ref loop on input in seg6 lwt (Hangbin Liu) [RHEL-84573]
  - net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (Hangbin Liu) [RHEL-84573] {CVE-2025-21768}
  - inet: ipmr: fix data-races (Hangbin Liu) [RHEL-84573]
  - perf script: Fix hangup in offline flamegraph report (Anubhav Shelat) [RHEL-87957]
  - perf script: force stdin for flamegraph in live mode (Anubhav Shelat) [RHEL-87957]
  - locking/lockdep: Add kasan_check_byte() check in lock_acquire() (Waiman Long) [RHEL-81997]
  - locking/lockdep: Disable KASAN instrumentation of lockdep.c (Waiman Long) [RHEL-81997]
  - Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices. (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Fix driver sending truncated data (Bastien Nocera) [RHEL-74483]
  - Bluetooth: MGMT: Fix Add Device to responding before completing (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_sync: Fix not setting Random Address when required (Bastien Nocera) [RHEL-74483]
  - Bluetooth: iso: Fix circular lock in iso_conn_big_sync (Bastien Nocera) [RHEL-74483] {CVE-2024-54191}
  - Bluetooth: SCO: Add support for 16 bits transparent voice setting (Bastien Nocera) [RHEL-74483]
  - Bluetooth: iso: Fix recursive locking warning (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Improve setsockopt() handling of malformed user input (Bastien Nocera) [RHEL-74483]
  - net: Make copy_safe_from_sockptr() match documentation (Bastien Nocera) [RHEL-74483]
  - net: add copy_safe_from_sockptr() helper (Bastien Nocera) [RHEL-74483]
  - net/tcp: Introduce TCP_AO setsockopt()s [partial] (Bastien Nocera) [RHEL-74483]
  - Bluetooth: SCO: remove the redundant sco_conn_put (Bastien Nocera) [RHEL-74483]
  - Bluetooth: MGMT: Add initial implementation of MGMT_OP_HCI_CMD_SYNC (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_bcm: Use the devm_clk_get_optional() helper (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Send BIG Create Sync via hci_sync (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_conn: Remove alloc from critical section (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Use kref to track lifetime of iso_conn (Bastien Nocera) [RHEL-74483]
  - Bluetooth: SCO: Use kref to track lifetime of sco_conn (Bastien Nocera) [RHEL-74483]
  - Bluetooth: HCI: Add IPC(11) bus type (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add 3 HWIDs for MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add new VID/PID 0489/e124 for MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Update hci_conn_hash_lookup_big for Broadcast slave (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Do not emit LE BIG Create Sync if previous is pending (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Fix matching parent socket for BIS slave (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Do not emit LE PA Create Sync if previous is pending (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btrtl: Decrease HCI_OP_RESET timeout from 10 s to 2 s (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btintel_pcie: Replace deprecated PCI functions (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Set quirks for ATS2851 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Support new quirks for ATS2851 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Add new quirks for ATS2851 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_qca: use devm_clk_get_optional_enabled_with_rate() (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btmtksdio: Lookup device node only as fallback (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_core: Fix not checking skb length on hci_scodata_packet (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Add GPIO support to power save feature (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add USB HW IDs for MT7920/MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (Bastien Nocera) [RHEL-74483]
  - bluetooth: Fix typos in the comments (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Rename IW615 to IW610 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Drop _v0 suffix from FW names (Bastien Nocera) [RHEL-74483]
  - Bluetooth: add HAS_IOPORT dependencies (Bastien Nocera) [RHEL-74483]
  - perf annotate: Return errors from disasm_line__parse_powerpc() (Jakub Brnak) [RHEL-83785]
  - perf annotate: Add annotation_options.disassembler_used (Jakub Brnak) [RHEL-83785]
  - perf annotate: Use an array for the disassembler preference (Jakub Brnak) [RHEL-83785]
  - perf disasm: Allow configuring what disassemblers to use (Jakub Brnak) [RHEL-83785]
  - perf disasm: Define stubs for the LLVM and capstone disassemblers (Jakub Brnak) [RHEL-83785]
  - perf disasm: Introduce symbol__disassemble_objdump() (Jakub Brnak) [RHEL-83785]
  - netpoll: hold rcu read lock in __netpoll_send_skb() (Paolo Abeni) [RHEL-87474]
  - net: Clear old fragment checksum value in napi_reuse_skb (Paolo Abeni) [RHEL-87474]
  - neighbour: use RCU protection in __neigh_notify() (Paolo Abeni) [RHEL-87474]
  - iomap: add a workaround for racy i_size updates on block devices (CKI Backport Bot) [RHEL-79099]
  - selftests: netfilter: add test case for recent mismatch bug (CKI Backport Bot) [RHEL-87163]
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet (CKI Backport Bot) [RHEL-87163]
  - sctp: detect and prevent references to a freed transport in sendmsg (Xin Long) [RHEL-84590]
  - sctp: add mutual exclusion in proc_sctp_do_udp_port() (Xin Long) [RHEL-84590]
  - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: udp_port: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - scsi: fnic: Remove unnecessary NUL-terminations (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove redundant flush_workqueue() calls (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary spinlock locking and unlocking (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace fnic->lock_flags with local flags (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace use of sizeof with standard usage (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix indentation and remove unnecessary parenthesis (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary debug print (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Test for memory allocation failure and return error code (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Return appropriate error code from failure of scsi drv init (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Return appropriate error code for mem alloc failure (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix use of uninitialized value in debug message (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Delete incorrect debugfs error handling (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove extern definition from .c files (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Increment driver version (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support to handle port channel RSCN (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Code cleanup (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add stats and related functionality (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify fnic interfaces to use FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify IO path to use FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add functionality in fnic to support FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and integrate support for FIP (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and integrate support for FDMI (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add Cisco hardware model names (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for unsolicited requests and responses (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for target based solicited requests and responses (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for fabric based solicited requests and responses (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add headers and definitions for FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Use vcalloc() instead of vmalloc() and memset(0) (Karan Kumar) [RHEL-64440]
  - scsi: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Move flush_work initialization out of if block (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Move fnic_fnic_flush_tx() to a work queue (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Convert snprintf() to sysfs_emit() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Clean up some inconsistent indenting (Karan Kumar) [RHEL-64440]
  - scsi: fnic: unlock on error path in fnic_queuecommand() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Increment driver version (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Improve logs and add support for multiqueue (MQ) (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for multiqueue (MQ) in fnic driver (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for multiqueue (MQ) in fnic_main.c (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove usage of host_lock (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Define stats to track multiqueue (MQ) IOs (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify ISRs to support multiqueue (MQ) (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Refactor and redefine fnic.h for multiqueue (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Get copy workqueue count and interrupt mode from config (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Rename wq_copy to hw_copy_wq (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and improve log messages (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and use fnic number (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify definitions to sync with VIC firmware (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Return error if vmalloc() failed (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Clean up some inconsistent indenting (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix sg_reset success path (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unused functions fnic_scsi_host_start/end_tag() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace sgreset tag with max_tag_id (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Use vmalloc_array() and vcalloc() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Use vzalloc() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Refactor code in fnic probe to initialize SCSI layer (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace DMA mask of 64 bits with 47 bits (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unneeded flush_workqueue() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove redundant NULL check (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Stop using the SCSI pointer (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix a tracing statement (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Call scsi_done() directly (Karan Kumar) [RHEL-64440]
  - tools/power turbostat: v2025.05.06 (David Arcari) [RHEL-86839]
  - tools/power turbostat: disable "cpuidle" invocation counters, by default (David Arcari) [RHEL-86839]
  - tools/power turbostat: re-factor sysfs code (David Arcari) [RHEL-86839]
  - tools/power turbostat: Restore GFX sysfs fflush() call (David Arcari) [RHEL-86839]
  - tools/power turbostat: Document GNR UncMHz domain convention (David Arcari) [RHEL-86839]
  - tools/power turbostat: report CoreThr per measurement interval (David Arcari) [RHEL-86839]
  - tools/power turbostat: Increase CPU_SUBSET_MAXCPUS to 8192 (David Arcari) [RHEL-86839]
  - tools/power turbostat: Add idle governor statistics reporting (David Arcari) [RHEL-86839]
  - tools/power turbostat: Fix names matching (David Arcari) [RHEL-86839]
  - tools/power turbostat: Allow Zero return value for some RAPL registers (David Arcari) [RHEL-86839]
  - tools/power turbostat: Clustered Uncore MHz counters should honor show/hide options (David Arcari) [RHEL-86839]
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (David Arcari) [RHEL-45087]
  - platform/x86: intel: Use *-y instead of *-objs in Makefile (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Update documentation with image download path (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Add Clearwater Forest to CPU support list (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Fix SBAF title underline length (David Arcari) [RHEL-45087]
  - trace: platform/x86/intel/ifs: Add SBAF trace support (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Add SBAF test support (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Add SBAF test image loading support (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Refactor MSR usage in IFS test code (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Initialize union ifs_status to zero (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Switch to new Intel CPU model defines (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Disable irq during one load stage (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Classify error scenarios correctly (David Arcari) [RHEL-45087]
  - RDMA/mlx5: Fix implicit ODP hang on parent deregistration (CKI Backport Bot) [RHEL-81415] {CVE-2025-21714}
  - RDMA/mlx5: Fix implicit ODP use after free (CKI Backport Bot) [RHEL-81415] {CVE-2025-21714}
  - redhat: remove kernel-ipaclones-internal package (Joe Lawrence) [RHEL-86518]
  - net: decrease cached dst counters in dst_release (Antoine Tenart) [RHEL-83031]
  - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-86674]
  - RDMA/bnxt_re: Remove unusable nq variable (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix budget handling of notification queue (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support perf management counters (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix reporting maximum SRQs on P7 chips (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix allocation of QP table (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix the statistics for Gen P7 VF (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix issue in the unload path (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add sanity checks on rdev validity (Sreekanth Reddy) [RHEL-72652 RHEL-76569 RHEL-80075]
  - RDMA/bnxt_re: Fix an issue in bnxt_re_async_notifier (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Allocate dev_attr information dynamically (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Pass the context for ulp_irq_stop (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support to handle DCB_CONFIG_CHANGE event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Query firmware defaults of CC params during probe (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add Async event handling support (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - bnxt_en: Add ULP call to notify async events (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove deliver net device event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix MSN table size for variable wqe mode (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add send queue size check for variable wqe (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix to export port num to ib_query_qp (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix setting mandatory attributes for modify_qp (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove unnecessary header file inclusion (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Eliminate need for some forward declarations (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Optimize error handling in bnxt_re_probe (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove unnecessary goto in bnxt_re_netdev_event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove extra new line in bnxt_re_netdev_event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Don't fail destroy QP and cleanup debugfs earlier (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Use the default mode of congestion control (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support different traffic class (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Cache MSIx info to a local structure (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Refurbish CQ to NQ hash calculation (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for CQ rx coalescing (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Refactor NQ allocation (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fail probe early when not enough MSI-x vectors are reserved (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add set_func_resources support for P5/P7 adapters (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Enhance RoCE SRIOV resource configuration design (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for optimized modify QP (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - bnxt_en: Add support for RoCE sriov configuration (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add debugfs hook in the driver (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support raw data query for each resources (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for querying HW contexts (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support driver specific data collection using rdma tool (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix access flags for MR and QP modify (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for modify_device hook (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32 (Marcin Juszkiewicz) [RHEL-83075]
  - igb: Fix potential invalid memory access in igb_init_module() (CKI Backport Bot) [RHEL-73651] {CVE-2024-52332}
  - perf vendor events: Update Tigerlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update SkylakeX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Skylake metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Sierraforest events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Rocketlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Meteorlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update/add Lunarlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update IcelakeX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Icelake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update HaswellX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Haswell events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update/add Graniterapids events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update GrandRidge events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update EmeraldRapids events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Add Clearwaterforest events (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update CascadelakeX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update BroadwellX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update BroadwellDE events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Broadwell events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Add Arrowlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update AlderlakeN events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Alderlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Sapphirerapids events/metrics (Michael Petlan) [RHEL-21925]
  - nfsd: fix UAF when access ex_uuid or ex_stats (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - SUNRPC: no need get cache ref when protected by rcu (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - nfsd: no need get cache ref when protected by rcu (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - SUNRPC: introduce cache_check_rcu to help check in rcu context (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - Enable X86_USER_SHADOW_STACK (Štěpán Horáček) [RHEL-15599]
  - mm: don't try THP alignment for FS without get_unmapped_area (Štěpán Horáček) [RHEL-15599]
  - mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes (Štěpán Horáček) [RHEL-15599]
  - mm: care about shadow stack guard gap when getting an unmapped area (Štěpán Horáček) [RHEL-15599]
  - mm: pass vm_flags to generic_get_unmapped_area() (Štěpán Horáček) [RHEL-15599]
  - mm: make arch_get_unmapped_area() take vm_flags by default (Štěpán Horáček) [RHEL-15599]
  - x86/mm: care about shadow stack guard gap during placement (Štěpán Horáček) [RHEL-15599]
  - x86/mm: implement HAVE_ARCH_UNMAPPED_AREA_VMFLAGS (Štěpán Horáček) [RHEL-15599]
  - mm: take placement mappings gap into account (Štěpán Horáček) [RHEL-15599]
  - treewide: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - powerpc: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - parisc: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - csky: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - thp: add thp_get_unmapped_area_vmflags() (Štěpán Horáček) [RHEL-15599]
  - mm: use get_unmapped_area_vmflags() (Štěpán Horáček) [RHEL-15599]
  - mm: remove export for get_unmapped_area() (Štěpán Horáček) [RHEL-15599]
  - mm: introduce arch_get_unmapped_area_vmflags() (Štěpán Horáček) [RHEL-15599]
  - mm: switch mm->get_unmapped_area() to a flag (Štěpán Horáček) [RHEL-15599]
  - proc: refactor pde_get_unmapped_area as prep (Štěpán Horáček) [RHEL-15599]
  - selftests/x86: add placement guard gap test for shstk (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Enable shadow stacks for x32 (Štěpán Horáček) [RHEL-15599]
  - arch: Reserve map_shadow_stack() syscall number for all architectures (Štěpán Horáček) [RHEL-15599]
  - mm: thp_get_unmapped_area must honour topdown preference (Štěpán Horáček) [RHEL-15599]
  - mm: mmap: map MAP_STACK to VM_NOHUGEPAGE (Štěpán Horáček) [RHEL-15599]
  - mm: align larger anonymous mappings on THP boundaries (Štěpán Horáček) [RHEL-15599]
  - alpha: Fix up new futex syscall numbers (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Add warning for shadow stack double unmap (Štěpán Horáček) [RHEL-15599]
  - selftests/x86: Update map_shadow_stack syscall nr (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Change order of __user in type (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Don't retry vm_munmap() on -EINTR (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Add ARCH_SHSTK_STATUS (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Add ARCH_SHSTK_UNLOCK (Štěpán Horáček) [RHEL-15599]
  - crypto: ccp - Fix uAPI definitions of PSP errors (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add support for PCI device 0x1134 (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix check for the primary ASP device (Vladis Dronov) [RHEL-85131]
  - crypto: ccp: Add external API interface for PSP module initialization (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Use scoped guard for mutex (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - do not request interrupt on cmd completion when irqs disabled (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Remove unused declaration sp_get_master() (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add additional information about an SEV firmware upgrade (Vladis Dronov) [RHEL-85131]
  - KVM: SEV: uapi: fix typo in SEV_RET_INVALID_CONFIG (Vladis Dronov) [RHEL-85131]
  - crypto: ccp: Add the SNP_VLEK_LOAD command (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Move message about TSME being enabled later in init (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add support for getting security attributes on some older systems (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - align psp_platform_access_msg (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Move security attributes to their own file (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Represent capabilities register as a union (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - drop platform ifdef checks (Vladis Dronov) [RHEL-85131]
  - crypto: tools/ccp - Remove unused variable (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Update return values for some unit tests (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix some unfused tests (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix sample application signature passing (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix DBC sample application error handling (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix ioctl unit tests (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add Mario to MAINTAINERS (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add unit tests for dynamic boost control (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add a sample python script for Dynamic Boost Control (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add a sample library for ioctl use (Vladis Dronov) [RHEL-85131]
  - ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CKI Backport Bot) [RHEL-83191] {CVE-2025-21847}
  - x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() (Waiman Long) [RHEL-69423]
  - firmware: arm_scpi: Move power-domain driver to the pmdomain dir (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scpi: Convert to platform remove callback returning void (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-65607]
  - arm64: Use SYSTEM_OFF2 PSCI call to power off for hibernate (Steve Dunnagan) [RHEL-65607]
  - firmware/psci: Add definitions for PSCI v1.3 specification (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Report duplicate opps as firmware bugs (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Skip opp duplicates (Steve Dunnagan) [RHEL-65607]
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (Steve Dunnagan) [RHEL-65607]
  - arm64: smccc: replace custom COUNT_ARGS() & CONCATENATE() implementations (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use vendor string in max-rx-timeout-ms (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Reject clear channel request on A2P (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Queue in scmi layer for mailbox implementation (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Give SMC transport precedence over mailbox (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() (Steve Dunnagan) [RHEL-65607]
  - redhat/configs: Add SCMI configs (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add initial support for i.MX MISC protocol (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add initial support for i.MX BBM protocol (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add NXP i.MX95 SCMI documentation (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Replace comma with the semicolon (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Replace the use of of_node_put() to __free(device_node) (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix trivial whitespace/coding style issues (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use max-rx-timeout-ms from devicetree (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Remove const from transport descriptors (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Simplify with scoped for each OF child loop (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Update various protocols versions (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Remove legacy transport-layer code (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make VirtIO transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make OPTEE transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make SMC transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make MBOX transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for standalone transport drivers (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Introduce packet handling helpers (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Introduce setup_shmem_iomap (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix double free in OPTEE transport (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix voltage description in failure cases (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix incorrect error propagation in scmi_voltage_descriptors_get (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support to reset the debug metrics (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Create debugfs files for SCMI communication debug metrics (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Track basic SCMI communication debug metrics (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for debug metrics at the interface (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Remove superfluous handle_to_scmi_info (Steve Dunnagan) [RHEL-65607]
  - firmware/smccc: Call arch-specific hook on discovering KVM services (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for platform to agent channel completion (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for system suspend in power control driver (Steve Dunnagan) [RHEL-65607]
  - firmware: smccc: Export revision soc_id function (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Avoid non-constant printk format strings (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use dev_err_probe to bail out (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix struct kernel-doc warnings in optee transport (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make scmi_bus_type const (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix double free in SMC transport cleanup path (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add multiple protocols registration support (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Replace asm-generic/bug.h with linux/bug.h (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Convert to platform remove callback returning void (Steve Dunnagan) [RHEL-65607]
  - pmdomain: arm_scmi: Move Kconfig options to the pmdomain subsystem (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Move power-domain driver to the pmdomain dir (Steve Dunnagan) [RHEL-65607]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-583.el9]
changelog:
  - Revert "io_uring/uring_cmd: defer SQE copying until it's needed" (Jeff Moyer) [RHEL-82695] {CVE-2025-21837}
  - s390/dasd: Remove DMA alignment (Mete Durlu) [RHEL-88820]
  - ALSA: update RHEL kconfigs for 6.13 upstream code (Jaroslav Kysela) [RHEL-80681]
  - ASoC: use playback_only/capture_only instead dpcm_playback/dpcm_capture flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tegra: Fix ADX S24_LE audio format (Jaroslav Kysela) [RHEL-80681]
  - ASoC: simple-card-utils: fix priv->dai_props indexing (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda/realtek: Fix volume adjustment issue on Lenovo ThinkBook 16P Gen5 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l43: Add codec force suspend/resume ops (Jaroslav Kysela) [RHEL-80681]
  - ALSA: doc: Add codecs/index.rst to top-level index (Jaroslav Kysela) [RHEL-80681]
  - ALSA: doc: cs35l56: Add information about Cirrus Logic CS35L54/56/57 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: samsung: Add missing selects for MFD_WM8994 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: es8316: Fix HW rate calculation for 48Mhz MCLK (Jaroslav Kysela) [RHEL-80681]
  - ASoC: wm8994: Add depends on MFD core (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tas2781: Fix occasional calibration failture (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: ES8326: Adjust ANA_MICBIAS to reduce pop noise (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: fix remaining descriptor races in sound/core/compress_offload.c (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: Drop unneeded no_free_ptr() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda/tas2781: Ignore SUBSYS_ID not found for tas2563 projects (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: improve file descriptors installation for dma-buf (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: use safe list iteration in snd_compr_task_seq() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: import DMA_BUF namespace (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: avoid 64-bit get_user() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: wcd937x: Use *-y for Makefile (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: Use *-y for Makefile (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SDCA: Use *-y for Makefile (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: avs: da7219: Remove suspend_pre() and resume_post() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda/tas2781: Fix error code tas2781_read_acpi() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: improve bass speaker support for ASUS Zenbook UM5606WA (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: Show the codec quirk info at probing (Jaroslav Kysela) [RHEL-80681]
  - ALSA: asihpi: Remove unused variable (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda/tas2781: Add speaker id check for ASUS projects (Jaroslav Kysela) [RHEL-80681]
  - ASoC: doc: dapm: Add location information for dapm-graph tool (Jaroslav Kysela) [RHEL-80681]
  - ASoC: apple: Fix the wrong format specifier (Jaroslav Kysela) [RHEL-80681]
  - ALSA: docs: fix dead hyperlink to Intel HD-Audio spec (Jaroslav Kysela) [RHEL-80681]
  - ALSA: ac97: bus: Fix the mistake in the comment (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: Fix build dependencies for `SND_SOC_AMD_PS` (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: Poll jack events for LS7A HD-Audio (Jaroslav Kysela) [RHEL-80681]
  - ALSA: ump: Fix the wrong format specifier (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: soc-acpi-intel-lnl-match: add rt712_vb + rt1320 support (Jaroslav Kysela) [RHEL-80681]
  - ASoC: stm32: dfsdm: change rate upper limits (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sma1307: fix uninitialized variable refence (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: simple-mux: add idle-state property (Jaroslav Kysela) [RHEL-80681]
  - ASoc: simple-mux: add idle-state support (Jaroslav Kysela) [RHEL-80681]
  - soundwire: Minor formatting fixups in sdw.h header (Jaroslav Kysela) [RHEL-80681]
  - soundwire: Update the includes on the sdw.h header (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: remove redundant assignment to variable ret (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdca: test adev before calling acpi_dev_for_each_child (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: ps: fix the pcm device numbering for acp 6.3 platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: add soundwire machine driver for legacy stack (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: move get_acp63_cpu_pin_id() to common file (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: ps: add soundwire machines for acp6.3 platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: add RT711, RT714 & RT1316 support for acp 6.3 platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: add rt722 based soundwire machines (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: Add missing descriptions in structs (Jaroslav Kysela) [RHEL-80681]
  - ALSA: pcm: Define snd_pcm_mmap_data_{open|close}() locally (Jaroslav Kysela) [RHEL-80681]
  - ALSA: tidyup SNDRV_PCM_TRIGGER_xxx numbering (Jaroslav Kysela) [RHEL-80681]
  - ASoC: simple-card-utils: care simple_util_dai for dummy DAI (Jaroslav Kysela) [RHEL-80681]
  - ASoC: test-component: Support continuous rates for test component (Jaroslav Kysela) [RHEL-80681]
  - ASoC: max98088: Add headphone mixer switch (Jaroslav Kysela) [RHEL-80681]
  - ASoC: max98088: Add left/right DAC volume control (Jaroslav Kysela) [RHEL-80681]
  - ASoc: SOF: ipc4-pcm: fix uninit-value in sof_ipc4_pcm_dai_link_fixup_rate (Jaroslav Kysela) [RHEL-80681]
  - ASoC: max98088: Remove duplicate DACs (Jaroslav Kysela) [RHEL-80681]
  - ASoC: machine: update documentation (Jaroslav Kysela) [RHEL-80681]
  - ASoC: qcom: sm8250: add handling of secondary MI2S clock (Jaroslav Kysela) [RHEL-80681]
  - ALSA: ump: remove unnecessary check on blk (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Kconfig: Revert make SND_SOC_ACPI_INTEL_MATCH depend on ACPI (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Kconfig: Only select SND_SOC_SDCA if ACPI is enabled (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sma1307: Fix invalid logical judgement (Jaroslav Kysela) [RHEL-80681]
  - ASoC: ux500: Remove redundant casts (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda: handle only paused streams in hda_dai_suspend() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda: Add support for persistent Code Loader DMA buffers (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda-stream: Always use at least two BDLE for transfers (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc3-loader: 'Handle' PROBE_INFO ext_manifest type when parsing (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ext_manifest: Add missing ext_manifest type for PROBE_INFO (Jaroslav Kysela) [RHEL-80681]
  - ASoC: da7213: Extend support for the MCK in range [2, 50] MHz (Jaroslav Kysela) [RHEL-80681]
  - ASoC: da7213: Avoid setting PLL when closing audio stream (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sma1307: Add driver for Iron Device SMA1307 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: irondevice,sma1307: Add initial DT (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Kconfig: select SND_SOC_SDCA by SND_SOC_ACPI_INTEL_SDCA_QUIRKS (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Kconfig: make SND_SOC_ACPI_INTEL_MATCH depend on ACPI (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: Use runtime pointer in snd_compr_poll() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt721-sdca: change interrupt mask from XU to GE (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt722: change the interrupt mask for jack type detection (Jaroslav Kysela) [RHEL-80681]
  - ASoC: qcom: sc8280xp Add SM8750 sound card (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: qcom,sm8250: Add SM8750 sound card (Jaroslav Kysela) [RHEL-80681]
  - ASoC: bcm63xx-pcm-whistler: fix uninit-value in i2s_dma_isr (Jaroslav Kysela) [RHEL-80681]
  - ASoC: qcom: x1e80100: Support boards with two speakers (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: ES8326: Reduce pop noise (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: Fix for ACP SOF dmic tplg component load failure (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: Fix unused variable warning (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: intel: Switch to pci_alloc_irq_vectors API (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: intel: Don't free interrupt when suspending (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cleanup function parameter for rtd and its id (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-core: do rtd->id trick at snd_soc_add_pcm_runtime() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: remove rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: generic: switch to use rtd->id from rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sh: switch to use rtd->id from rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: meson: switch to use rtd->id from rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl: switch to use rtd->id from rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rename rtd->num to rtd->id (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Add aw88081 amplifier driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: Add schema for "awinic,aw88081" (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdw_utils: Update stream_name in dai_links structure (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdw_utils/intel/amd: refactor dai link init logic (Jaroslav Kysela) [RHEL-80681]
  - mfd: cs42l43: Disable IRQs during suspend (Jaroslav Kysela) [RHEL-80681]
  - ASoC: doc: update clock api details (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: wcd937x: Remove unused of_gpio.h (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: Remove unused including <linux/version.h> (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: adau1373: add powerdown gpio (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: adau1373: drop patform_data (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: document the adau1373 Codec (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: adau1373: add some kconfig text (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: remove incorrect of_match_ptr() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: usb-audio: Add Pioneer DJ/AlphaTheta DJM-A9 Mixer (Jaroslav Kysela) [RHEL-80681]
  - ALSA: docs: Add toctree index entry for co-processor acceleration API (Jaroslav Kysela) [RHEL-80681]
  - ALSA: docs: compress-accel: Format state machine flowchart as code block (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: ES8326: Modify the configuration of and micbias (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-devres: Remove unused devm_snd_soc_register_dai (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt1320: add mic function (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: introduce accel operation mode (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: leverage ring sense IRQs to correctly detect headsets (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: Add new codec driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt-sdw-common: fix rt_sdca_index_update_bits function parameter description (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sun4i-codec: support allwinner H616 codec (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sun4i-codec: Add playback only flag to quirks (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sun4i-codec: Add support for different DAC FIFOC addresses to quirks (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: fix error code in ntp8835_i2c_probe() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-pcm: merge DPCM and non-DPCM validation check (Jaroslav Kysela) [RHEL-80681]
  - ASoC: doc: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-pcm: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-topology: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: intel: boards: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-compress: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-core: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: samsung: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: intel: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sof: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: core: Add fw, tplg and ipc type override parameters (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: sof-of-dev: add parameter to override tplg/fw_filename (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: core: Add debug module parameters to set IPC and boot timeout (Jaroslav Kysela) [RHEL-80681]
  - ASoC: uniphier: Handle regmap_write errors in aio_iecout_set_enable() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl_xcvr: reset RX dpath after wrong preamble (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl_xcvr: enable interrupt of cmdc status update (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tegra: Add support for S24_LE audio format (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: adau1372: add match table (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-utils: Remove PAGE_SIZE compile-time constant assumption (Jaroslav Kysela) [RHEL-80681]
  - ASoC: nau8821: check regmap_raw_read/regmap_raw_write for failure (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: Add stream name to ACP PDM DMIC devices (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rx651: Use card->dev in replace of the &pdev->dev argument in the dev_err function (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda: use machine_check() for SoundWire (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: soc-acpi: add is_device_rt712_vb() helper (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdw_utils: add SmartMic DAI for RT713 VB (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdw_utils: add SmartMic DAI for RT712 VB (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt712-sdca: detect the SMART_MIC function during the probe stage (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-acpi: introduce new 'machine check' callback (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SDCA: add quirk function for RT712_VB match (Jaroslav Kysela) [RHEL-80681]
  - soundwire: slave: lookup SDCA version and functions (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SDCA: add initial module (Jaroslav Kysela) [RHEL-80681]
  - ASoC/soundwire: remove sdw_slave_extended_id (Jaroslav Kysela) [RHEL-80681]
  - soundwire: sdw_intel: include linux/acpi.h (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Remove unneeded semicolon (Jaroslav Kysela) [RHEL-80681]
  - ASoC: makes snd_soc_set_runtime_hwparams() inline (Jaroslav Kysela) [RHEL-80681]
  - mfd: cs42l43: Fix issues in probe error paths (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt-sdw-common: Enhance switch case to prevent uninitialized variable (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: Fix all stream interrupts definition (Jaroslav Kysela) [RHEL-80681]
  - ASoC/SoundWire: Intel: lnl: enable interrupts after first power-up/before last power-down (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda-mlink: expose unlocked interrupt enable routine (Jaroslav Kysela) [RHEL-80681]
  - ASoC: imx-card: Add CS42888 support (Jaroslav Kysela) [RHEL-80681]
  - ASoC: imx-card: Set mclk for codec (Jaroslav Kysela) [RHEL-80681]
  - ALSA: usb-audio: Use snprintf instead of sprintf in build_mixer_unit_ctl (Jaroslav Kysela) [RHEL-80681]
  - ALSA: ice1712: Remove redundant code in stac9460_dac_vol_put (Jaroslav Kysela) [RHEL-80681]
  - ALSA: firewire: Remove unused cmp_connection_update (Jaroslav Kysela) [RHEL-80681]
  - soundwire: cadence: add soft-reset on startup (Jaroslav Kysela) [RHEL-80681]
  - soundwire: cadence: clear MCP BLOCK_WAKEUP in init (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt721-sdca: Clean logically deadcode in rt721-sdca.c (Jaroslav Kysela) [RHEL-80681]
  - ASoC: qcom: sm8250: correct typo in shutdown function name (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Add rt721-sdca support for PTL platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Add helper function to print the module's in/out audio format (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Concentrate prints inside of sof_ipc4_init_output_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Use local variables in sof_ipc4_init_output_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Simplify code to deal with process modules without output (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Simplify match format print in sof_ipc4_init_input_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Remove redundant check in sof_ipc4_init_input_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Use local variables in sof_ipc4_init_input_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Drop the 'index' from 'Pin index' of format print (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt721-sdca: Fix issue of warning message (Jaroslav Kysela) [RHEL-80681]
  - ALSA: aica: Remove unused variable (Jaroslav Kysela) [RHEL-80681]
  - ALSA: dbri: Fix formatting issue in dbri.c (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Fix mixed declarations and code warning (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Return ENOSPC for out-of-bounds flash writes (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Simplify linked channel handling (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Add support for device map retrieval (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Fix redeclaration of loop variable (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt721-sdca: Add RT721 SDCA driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt-sdw-common: Common functions for Realtek soundwire driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: soc-acpi-intel-ptl-match: Add rt721 support (Jaroslav Kysela) [RHEL-80681]
  - ASoC: intel/sdw_utils: refactor RT multifunction sdca speaker codecs (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl: fsl_qmc_audio: Remove the logging when parsing channels (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tlv320adc3xxx: Fix unsigned int compared against 0 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: uniphier: Handle regmap_write errors in aio_src_set_param() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: sof_rt5682: Add support for ptl_max98360a_rt5682 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sh: rz-ssi: Use SSIFCR_FIFO_RST macro (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add support for DP0/DPn 'lane-list' property (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi_disco: add support for clock-scales property (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add error handling for property array read (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add support for peripheral channelprepare timeout (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add new properties from 2.0 spec (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add comment on DP0-supported property (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: remove DPn audio-modes (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi_disco: add MIPI-specific property_read_bool() helpers (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_stream_runtime memory layout (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_master_prop (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_bus structure (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_slave_prop (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_dp0_prop (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_dpn_prop (Jaroslav Kysela) [RHEL-80681]
  - soundwire: Correct some typos in comments (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: amd: pass acp_rev as soundwire resource data (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: ps: pass acp pci revision id as soundwire resource data (Jaroslav Kysela) [RHEL-80681]
  - soundwire: amd: pass acp pci revision id as resource data (Jaroslav Kysela) [RHEL-80681]
  - soundwire: amd: refactor existing code for acp 6.3 platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: wcd9335: remove unnecessary MODULE_ALIAS() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: drop bogus NULL check from i2s_irq_handler (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt1320: fix the range of patch code address (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: aw88399: Fix spelling mistake "unsupport" -> "unsupported" (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl: Use maple tree register cache (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tas5805m: Improve a size determination in tas5805m_i2c_probe() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: bcm2835-i2s: Use maple tree register cache (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt1320: reads patch code from firmware file (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: aw88395: Fix spelling mistake "unsupport" -> "unsupported" (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tas2781: Fix redundant parameter assignment (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc3: Use standard dev_dbg API (Jaroslav Kysela) [RHEL-80681]
  - ASoC: constify snd_soc_component_driver struct (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: remove unused variable from acp platform driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: replace adata->platform conditional check (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: remove unused variable from acp_card_drvdata structure (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: update mach_params subsystem_rev field (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: pass acp pci revision id as platform data (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: store acp pci rev id in platform driver private structure (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: use acp pci revision id for platform differntiation (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: use acp_rev for platform specific conditional checks (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: simplify platform conditional checks code (Jaroslav Kysela) [RHEL-80681]
  - ASoC: stm: fix macro definition on STM_SAI_HAS_EXT_SYNC (Jaroslav Kysela) [RHEL-80681]
  - ASoC: remove unused substream in macro soc_dai_mark_pop (Jaroslav Kysela) [RHEL-80681]
  - ASoC: remove unused substream in macro soc_link_mark_pop (Jaroslav Kysela) [RHEL-80681]
  - ASoC: remove unused substream in macro soc_component_mark_pop (Jaroslav Kysela) [RHEL-80681]
  - ASoC: improve macro definition on TWL4030_OUTPUT_PGA (Jaroslav Kysela) [RHEL-80681]
  - ASoC: atmel: mchp-spdiftx: Remove interface name from stream_name (Jaroslav Kysela) [RHEL-80681]
  - ASoC: atmel: mchp-spdifrx: Remove interface name from stream_name (Jaroslav Kysela) [RHEL-80681]
  - ASoC: atmel: atmel_ssc_dai: Drop S24_LE support due to single channel limitation (Jaroslav Kysela) [RHEL-80681]
  - ASoC: atmel: atmel_ssc_dai: Add stream names (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Add NeoFidelity NTP8835 codec (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: Add NeoFidelity NTP8835 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: Add NeoFidelity NTP8918 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Add NeoFidelity NTP8918 codec (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Add NeoFidelity Firmware helpers (Jaroslav Kysela) [RHEL-80681]
  - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Jaroslav Kysela) [RHEL-80681]
  - loop: Fix use-after-free issues (Ming Lei) [RHEL-87488]
  - blk-cgroup: Fix class @block_class's subsystem refcount leakage (Ming Lei) [RHEL-81398] {CVE-2025-21745}
  - block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone (Ming Lei) [RHEL-80794]
  - treewide: Switch/rename to timer_delete[_sync]() (Kamal Heib) [RHEL-83218]
  - RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (Kamal Heib) [RHEL-83218]
  - rdma/cxgb4: Prevent potential integer overflow on 32bit (Kamal Heib) [RHEL-83218]
  - RDMA/cxgb4: Dump vendor specific QP details (Kamal Heib) [RHEL-83218]
  - xfrm: Fix the usage of skb->sk (Sabrina Dubroca) [RHEL-84576]
  - xfrm: delete intermediate secpath entry in packet offload mode (Sabrina Dubroca) [RHEL-84576]
  - xfrm: state: fix out-of-bounds read during lookup (Sabrina Dubroca) [RHEL-84576]
  - configs: add redhat/configs/common/generic/CONFIG_OBJTOOL_WERROR (Joe Lawrence) [RHEL-85302]
  - redhat: make ENABLE_WERROR enable also OBJTOOL_WERROR (Joe Lawrence) [RHEL-85302]
  - objtool: Add CONFIG_OBJTOOL_WERROR (Joe Lawrence) [RHEL-85302]
  - objtool: Create backup on error and print args (Joe Lawrence) [RHEL-85302]
  - objtool: Change "warning:" to "error:" for --Werror (Joe Lawrence) [RHEL-85302]
  - objtool: Add --Werror option (Joe Lawrence) [RHEL-85302]
  - objtool: Use O_CREAT with explicit mode mask (Joe Lawrence) [RHEL-85302]
  - objtool: Add --output option (Joe Lawrence) [RHEL-85302]
  - objtool: Fix error handling inconsistencies in check() (Joe Lawrence) [RHEL-85302]
  - x86/smp: Fix mwait_play_dead() and acpi_processor_ffh_play_dead() noreturn behavior [partial 2] (Joe Lawrence) [RHEL-85302]
  - virtgpu: don't reset on shutdown (Eric Auger) [RHEL-331]
  - virtio: break and reset virtio devices on device_shutdown() (Eric Auger) [RHEL-331]
  - efi: pstore: Return proper errors on UEFI failures (Lenny Szubowicz) [RHEL-2564]
  - efi: pstore: Request at most 512 bytes for variable names (Lenny Szubowicz) [RHEL-2564]
  - efi: pstore: Allow dynamic initialization based on module parameter (Lenny Szubowicz) [RHEL-2564]
  - efi: pstore: Add module parameter for setting the record size (Lenny Szubowicz) [RHEL-2564]
  - efi: pstore: Omit efivars caching EFI varstore access layer (Lenny Szubowicz) [RHEL-2564]
  - efi: vars: Add thin wrapper around EFI get/set variable interface (Lenny Szubowicz) [RHEL-2564]
  - efi: vars: Don't drop lock in the middle of efivar_init() (Lenny Szubowicz) [RHEL-2564]
  - pstore: Add priv field to pstore_record for backend specific use (Lenny Szubowicz) [RHEL-2564]
  - selftests/sgx: Fix an enclave built with extended instructions (Vladis Dronov) [RHEL-86442]
  - x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled (Vladis Dronov) [RHEL-86442]
  - x86/sgx: Fix size overflows in sgx_encl_create() (Vladis Dronov) [RHEL-86442]
  - x86/sgx: Use vmalloc_array() instead of vmalloc() (Vladis Dronov) [RHEL-86442]
  - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88830]
  - ALSA: hda/tas2781: Fix index issue in tas2781 hda SPI driver (CKI Backport Bot) [RHEL-81726]
  - ALSA: hda/tas2781: Update tas2781 hda SPI driver (CKI Backport Bot) [RHEL-81726]
  - nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() (Benjamin Coddington) [RHEL-87724]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-584.el9]
changelog:
  - net: warn if NAPI instance wasn't shut down (Davide Caratti) [RHEL-77816]
  - net: hide the definition of dev_get_by_napi_id() (Davide Caratti) [RHEL-77816]
  - net: page_pool: don't try to stash the napi id (Davide Caratti) [RHEL-77816]
  - xsk: Bring back busy polling support (Davide Caratti) [RHEL-77816]
  - net: Make napi_hash_lock irq safe (Davide Caratti) [RHEL-77816]
  - netdev: prevent accessing NAPI instances from another namespace (Davide Caratti) [RHEL-77816] {CVE-2025-21659}
  - netdev-genl: Hold rcu_read_lock in napi_set (Davide Caratti) [RHEL-77816]
  - mlx4: Add support for persistent NAPI config to RX CQs (Davide Caratti) [RHEL-77816]
  - mlx5: Add support for persistent NAPI config (Davide Caratti) [RHEL-77816]
  - bnxt: Add support for persistent NAPI config (Davide Caratti) [RHEL-77816]
  - netdev-genl: Support setting per-NAPI config values (Davide Caratti) [RHEL-77816]
  - net: napi: Add napi_config (Davide Caratti) [RHEL-77816]
  - netdev-genl: Dump gro_flush_timeout (Davide Caratti) [RHEL-77816]
  - net: napi: Make gro_flush_timeout per-NAPI (Davide Caratti) [RHEL-77816]
  - netdev-genl: Dump napi_defer_hard_irqs (Davide Caratti) [RHEL-77816]
  - net: napi: Make napi_defer_hard_irqs per-NAPI (Davide Caratti) [RHEL-77816]
  - x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-88224]
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-88224]
  - KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-88224]
  - x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-88224]
  - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (Waiman Long) [RHEL-88224]
  - x86/bugs: Skip RSB fill at VMEXIT (Waiman Long) [RHEL-88224]
  - x86/cpufeatures: Add a IBPB_NO_RET BUG flag (Waiman Long) [RHEL-88224]
  - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (Waiman Long) [RHEL-88224]
  - x86/bugs: Fix handling when SRSO mitigation is disabled (Waiman Long) [RHEL-88224]
  - x86/bugs: Add missing NO_SSB flag (Waiman Long) [RHEL-88224]
  - Documentation/srso: Document a method for checking safe RET operates properly (Waiman Long) [RHEL-88224]
  - redhat/configs: Add new CONFIG_MITIGATION_* kconfig files (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for GDS (Waiman Long) [RHEL-88224]
  - x86/bugs: Remove GDS Force Kconfig option (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for SSB (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for Spectre V2 (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for SRBDS (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for Spectre v1 (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for RETBLEED (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for L1TF (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for MMIO Stable Data (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for TAA (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for MDS (Waiman Long) [RHEL-88224]
  - x86/cpufeatures: Flip the /proc/cpuinfo appearance logic (Waiman Long) [RHEL-88224]
  - x86/bugs: Add 'spectre_bhi=vmexit' cmdline option (Waiman Long) [RHEL-88224]
  - x86/bugs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-88224]
  - x86/bugs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-88224]
  - x86/cpu: Use EXPORT_PER_CPU_SYMBOL_GPL() for x86_spec_ctrl_current (Waiman Long) [RHEL-88224]
  - linux/dim: Fix divide by 0 in RDMA DIM (CKI Backport Bot) [RHEL-80826] {CVE-2022-49670}
  - scsi: megaraid_sas: Driver version update to 07.734.00.00-rc1 (Chandrakanth Patil) [RHEL-80700]
  - scsi: megaraid_sas: Block zero-length ATA VPD inquiry (Chandrakanth Patil) [RHEL-80700]
  - scsi: megaraid_sas: Make most module parameters static (Chandrakanth Patil) [RHEL-80700]
  - powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-88421]
  - ibmvnic: Don't reference skb after sending to VIOS (Mamatha Inamdar) [RHEL-83359] {CVE-2025-21855}
  - netfilter: nft_tunnel: fix geneve_opt type confusion addition (CKI Backport Bot) [RHEL-88783] {CVE-2025-22056}
  - iommu/amd: Fix header file (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Fix possible circular locking dependency (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add the document for Intel IOMMU debugfs (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Preserve default DTE fields when updating Host Page Table Root (Jerry Snitselaar) [RHEL-78704]
  - drm/tegra: Fix NULL vs IS_ERR() check in probe() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make intel_iommu_drain_pasid_prq() cover faults for RID (Jerry Snitselaar) [RHEL-78704]
  - iommu: Fix a spelling error (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Expicitly enable CNTRL.EPHEn bit in resume path (Jerry Snitselaar) [RHEL-78704]
  - iommu: Fix potential memory leak in iopf_queue_remove_device() (Jerry Snitselaar) [RHEL-78704]
  - iommu/hyper-v: Don't assume cpu_possible_mask is dense (Jerry Snitselaar) [RHEL-78704]
  - iommufd: Keep OBJ/IOCTL lists in an alphabetical order (Jerry Snitselaar) [RHEL-78705]
  - iommufd: Deal with IOMMU_HWPT_FAULT_ID_VALID in iommufd core (Jerry Snitselaar) [RHEL-78708]
  - iommufd/selftest: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78708]
  - iommu/amd: Fully decode all combinations of alloc_paging_flags (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Move the nid to pdom_setup_pgtable() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Change amd_iommu_pgtable to use enum protection_domain_mode (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove type argument from do_iommu_domain_alloc() and related (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove dev == NULL checks (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove unused amd_iommu_domain_update() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: remove return value of amd_iommu_detect (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove amd_iommu_apply_erratum_63() (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Lock DTE before updating the entry with WRITE_ONCE() (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Modify clear_dte_entry() to avoid in-place update (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Introduce helper function get_dte256() (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Modify set_dte_entry() to use 256-bit DTE helpers (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Introduce helper function to update 256-bit DTE (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Introduce struct ivhd_dte_flags to store persistent DTE flags (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Misc ACPI IVRS debug info clean up (Jerry Snitselaar) [RHEL-75906]
  - iommu/vt-d: Link cache tags of same iommu unit together (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Draining PRQ in sva unbind path when FPD bit set (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove iommu cap audit (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (Jerry Snitselaar) [RHEL-78704]
  - iommu: Use str_enable_disable-like helpers (Jerry Snitselaar) [RHEL-78704]
  - lib/string_choices: Add some comments to make more clear for string choices helpers. (Jerry Snitselaar) [RHEL-78705]
  - lib/string_choices: Introduce several opposite string choice helpers (Jerry Snitselaar) [RHEL-78705]
  - lib/string_choices: Add str_true_false()/str_false_true() helper (Jerry Snitselaar) [RHEL-78705]
  - string_choices: Add wrapper for str_down_up() (Jerry Snitselaar) [RHEL-78705]
  - lib/string_choices: Add str_up_down() helper (Jerry Snitselaar) [RHEL-78705]
  - iommu: Remove the remove_dev_pasid op (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78705]
  - iommu: Detaching pasid by attaching to the blocked_domain (Jerry Snitselaar) [RHEL-78704]
  - iommu: Consolidate the ops->remove_dev_pasid usage into a helper (Jerry Snitselaar) [RHEL-78704]
  - iommu: Prevent pasid attach if no ops->remove_dev_pasid (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Add missing #include of linux/string_choices.h (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Use str_read_write helper w/ logs (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Add way to debug pgtable walk (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Re-use the pgtable walk for iova_to_phys (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Make pgtable walker more generic (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Add ACTLR data and support for qcom_smmu_500 (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Introduce ACTLR custom prefetcher settings (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Add support for PRR bit setup (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Refactor qcom_smmu structure to include single pointer (Jerry Snitselaar) [RHEL-78705]
  - redhat/configs: enable ARM_SMMU_MMU_500_CPRE_ERRATA (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Re-enable context caching in smmu reset operation (Jerry Snitselaar) [RHEL-78705]
  - iommu/tegra241-cmdqv: Read SMMU IDR1.CMDQS instead of hardcoding (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Fix cfg reading in arm_lpae_concat_mandatory() (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Add coverage for different OAS in selftest (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Fix stage-2 concatenation with 16K (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Make domain_alloc_paging_flags() directly determine the S1/S2 (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Remove arm_smmu_domain_finalise() during attach (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Document SVA interaction with new pagetable features (Jerry Snitselaar) [RHEL-78705]
  - arm64: add stubs for system_supports_poe and system_supports_gcs (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmuv3: Update comments about ATS and bypass (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Log better event records (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Introduce struct arm_smmu_event (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible (Jerry Snitselaar) [RHEL-78705]
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Avoid draining PRQ in sva mm release path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Add lockdep asserts for domain->dev_list (Jerry Snitselaar) [RHEL-78704]
  - scatterlist: fix incorrect func name in kernel-doc (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Improve uAPI comment for IOMMU_HW_INFO_TYPE_ARM_SMMUV3 (Jerry Snitselaar) [RHEL-78705]
  - iommufd/selftest: Cover IOMMU_FAULT_QUEUE_ALLOC in iommufd_fail_nth (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Fix typos in kernel-doc comments (Jerry Snitselaar) [RHEL-78708]
  - iommu: Rename ops->domain_alloc_user() to domain_alloc_paging_flags() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Add ops->domain_alloc_nested() (Jerry Snitselaar) [RHEL-78704]
  - scatterlist: fix a typo (Jerry Snitselaar) [RHEL-78704]
  - kmemleak: iommu/iova: fix transient kmemleak false positive (Jerry Snitselaar) [RHEL-78704]
  - iommu: Make set_dev_pasid op support domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Make set_dev_pasid() op support replace (Jerry Snitselaar) [RHEL-78705]
  - iommu/vt-d: Add set_dev_pasid callback for nested domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make identity_domain_set_dev_pasid() to handle domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make intel_svm_set_dev_pasid() support domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Limit intel_iommu_set_dev_pasid() for paging domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make intel_iommu_set_dev_pasid() to handle domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add iommu_domain_did() to get did (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Consolidate the struct dev_pasid_info add/remove (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add pasid replace helpers (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Refactor the pasid setup helpers (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add a helper to flush cache for updating present pasid entry (Jerry Snitselaar) [RHEL-78704]
  - iommu: Pass old domain to set_dev_pasid op (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Drain PRQs when domain removed from RID (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Drop pasid requirement for prq initialization (Jerry Snitselaar) [RHEL-78704]
  - iommufd: Enable PRI when doing the iommufd_hwpt_alloc (Jerry Snitselaar) [RHEL-78708]
  - iommu/vt-d: Move IOMMU_IOPF into INTEL_IOMMU (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove the pasid present check in prq_event_thread (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Separate page request queue from SVM (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Drop s1_pgtbl from dmar_domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove unused dmar_msi_read (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Increase buffer size for device name (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Use PCI_DEVID() macro (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Refine intel_iommu_domain_alloc_user() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Refactor first_level_by_default() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove domain_update_iommu_superpage() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove domain_update_iommu_cap() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Enhance compatibility check for paging domain attach (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove unused domain_alloc callback (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add domain_alloc_paging support (Jerry Snitselaar) [RHEL-78704]
  - iommu/iova: Fix typo 'adderss' (Jerry Snitselaar) [RHEL-78704]
  - iommu: Create __iommu_alloc_identity_domain() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Put domain allocation in __iommu_group_alloc_blocking_domain() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Put list_add/del(dev_data) back under the domain->lock (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Improve amd_iommu_release_device() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Add ops->release_domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Reorder attach device code (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Convert dev_data lock from spinlock to mutex (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Rearrange attach device code (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Reduce domain lock scope in attach device path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Do not detach devices in domain free path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove unused amd_iommus variable (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: xarray to track protection_domain->iommu list (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove protection_domain.dev_cnt variable (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Use ida interface to manage protection domain ID (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Fix corruption when mapping large pages from 0 (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Do not try copy old DTE resume path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Use atomic64_inc_return() in iommu.c (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Implement global identity domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Enhance amd_iommu_domain_alloc_user() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Pass page table type as param to pdom_setup_pgtable() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Separate page table setup from domain allocation (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Move V2 page table support check to early_amd_iommu_init() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Add helper function to check GIOSUP/GTSUP (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Enhance domain_alloc_user() to allocate PASID capable domain (Jerry Snitselaar) [RHEL-78705]
  - iommu: Add new flag to explictly request PASID capable domain (Jerry Snitselaar) [RHEL-78704]
  - iommu: Fix prototype of iommu_paging_domain_alloc_flags() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Introduce iommu_paging_domain_alloc_flags() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Refactor __iommu_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Remove iommu_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - remoteproc: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - drm/nouveau/tegra: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - gpu: host1x: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - drm/tegra: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Restore iommu_flush_iotlb_all() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Remove useless flush from iommu_create_device_direct_mappings() (Jerry Snitselaar) [RHEL-78704]
  - iommu/sysfs: constify the class struct (Jerry Snitselaar) [RHEL-78704]
  - iommu: Remove iommu_present() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Reorganize kerneldoc parameter names (Jerry Snitselaar) [RHEL-78704]
  - iommu: Make bus_iommu_probe() static (Jerry Snitselaar) [RHEL-78704]
  - iommu: Add a kdoc to iommu_unmap() (Jerry Snitselaar) [RHEL-78704]
  - iommu/io-pgtable-arm: Remove split on unmap behavior (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Add self test for the last page in the IAS (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Import IOMMUFD module namespace (Jerry Snitselaar) [RHEL-55204]
  - iommufd: IOMMU_IOAS_CHANGE_PROCESS selftest (Jerry Snitselaar) [RHEL-78708]
  - selftests: iommu: Use installed kernel headers search path (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Add IOMMU_IOAS_CHANGE_PROCESS (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Lock all IOAS objects (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Export do_update_pinned (Jerry Snitselaar) [RHEL-78708]
  - iommu/arm-smmu-v3: Support IOMMU_HWPT_INVALIDATE using a VIOMMU object (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Allow ATS for IOMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Use S2FWB for NESTED domains (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Support IOMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Support IOMMU_VIOMMU_ALLOC (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Expose the arm_smmu_attach interface (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Implement IOMMU_HWPT_ALLOC_NEST_PARENT (Jerry Snitselaar) [RHEL-55204]
  - redhat/configs: Enable CONFIG_ARM_SMMU_V3_IOMMUFD (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Support IOMMU_GET_HW_INFO via struct arm_smmu_hw_info (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Report IOMMU_CAP_ENFORCE_CACHE_COHERENCY for CANWBS (Jerry Snitselaar) [RHEL-55204]
  - ACPI/IORT: Support CANWBS memory access flag (Jerry Snitselaar) [RHEL-55204]
  - ACPICA: IORT: Update for revision E.f (Jerry Snitselaar) [RHEL-55204]
  - vfio: Remove VFIO_TYPE1_NESTING_IOMMU (Jerry Snitselaar) [RHEL-78708]
  - Documentation: userspace-api: iommufd: Update vDEVICE (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add vIOMMU coverage for IOMMU_HWPT_INVALIDATE ioctl (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add IOMMU_TEST_OP_DEV_CHECK_CACHE test command (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add mock_viommu_cache_invalidate (Jerry Snitselaar) [RHEL-73590]
  - iommufd/viommu: Add iommufd_viommu_find_dev helper (Jerry Snitselaar) [RHEL-73590]
  - iommu: Add iommu_copy_struct_from_full_user_array helper (Jerry Snitselaar) [RHEL-73590]
  - iommufd: Allow hwpt_id to carry viommu_id for IOMMU_HWPT_INVALIDATE (Jerry Snitselaar) [RHEL-73590]
  - iommu/viommu: Add cache_invalidate to iommufd_viommu_ops (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add IOMMU_VDEVICE_ALLOC test coverage (Jerry Snitselaar) [RHEL-73590]
  - iommufd/viommu: Add IOMMUFD_OBJ_VDEVICE and IOMMU_VDEVICE_ALLOC ioctl (Jerry Snitselaar) [RHEL-73590]
  - Documentation: userspace-api: iommufd: Update vIOMMU (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add IOMMU_VIOMMU_ALLOC test coverage (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add IOMMU_VIOMMU_TYPE_SELFTEST (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add refcount to mock_iommu_device (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Prepare for mock_viommu_alloc_domain_nested() (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add container_of helpers (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Allow pt_id to carry viommu_id for IOMMU_HWPT_ALLOC (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Add alloc_domain_nested op to iommufd_viommu_ops (Jerry Snitselaar) [RHEL-55217]
  - iommufd/viommu: Add IOMMU_VIOMMU_ALLOC ioctl (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Verify object in iommufd_object_finalize/abort() (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Introduce IOMMUFD_OBJ_VIOMMU and its related struct (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Move _iommufd_object_alloc helper to a sharable file (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Move struct iommufd_object to public iommufd header (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Allow fault reporting for non-PRI PCI devices (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Selftest coverage for IOMMU_IOAS_MAP_FILE (Jerry Snitselaar) [RHEL-78708]
  - iommufd: File mappings for mdev (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Add IOMMU_IOAS_MAP_FILE (Jerry Snitselaar) [RHEL-78708]
  - iommufd: pfn_reader for file mappings (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Folio subroutines (Jerry Snitselaar) [RHEL-78708]
  - iommufd: pfn_reader local variables (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Generalize iopt_pages address (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Rename uptr in iopt_alloc_iova() (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: Add folio_add_pins() (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: handle NULL pages in unpin_user_pages() (Jerry Snitselaar) [RHEL-78708] {CVE-2024-56612}
  - mm/gup: avoid an unnecessary allocation call for FOLL_LONGTERM cases (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: stop leaking pinned pages in low memory conditions (Jerry Snitselaar) [RHEL-78708]
  - mm/hugetlb: simplify refs in memfd_alloc_folio (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: fix memfd_pin_folios alloc race panic (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49872}
  - mm/gup: fix memfd_pin_folios hugetlb page allocation (Jerry Snitselaar) [RHEL-78708]
  - mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak (Jerry Snitselaar) [RHEL-78708]
  - mm/hugetlb: fix memfd_pin_folios free_huge_pages leak (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49964}
  - mm/filemap: fix filemap_get_folios_contig THP panic (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49873}
  - mm/gup: introduce memfd_pin_folios() for pinning memfd folios (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: introduce check_and_migrate_movable_folios() (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: introduce unpin_folio/unpin_folios helpers (Jerry Snitselaar) [RHEL-78708]
  - Documentation: userspace-api: iommufd: Update HWPT_PAGING and HWPT_NESTED (Jerry Snitselaar) [RHEL-78708]
  - dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: drop unneeded includes from dma-mapping.h (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: trace more error paths (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: trace dma_alloc/free direction (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: use macros to define events in a class (Jerry Snitselaar) [RHEL-78704]
  - redhat/configs: Remove CONFIG_DMA_API_DEBUG_SG (Jerry Snitselaar) [RHEL-78704]
  - dma-debug: remove DMA_API_DEBUG_SG (Jerry Snitselaar) [RHEL-78704]
  - dma-debug: fix physical address calculation for struct dma_debug_entry (Jerry Snitselaar) [RHEL-78708]
  - dma-debug: store a phys_addr_t in struct dma_debug_entry (Jerry Snitselaar) [RHEL-78704]
  - dma-debug: fix a possible deadlock on radix_lock (Jerry Snitselaar) [RHEL-78704] {CVE-2024-47143}
  - docs/core-api: swiotlb: fix typos (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu: Clarify MMU-500 CPRE workaround (Jerry Snitselaar) [RHEL-78705]
  - iommu/vt-d: Cleanup apic_printk() (Jerry Snitselaar) [RHEL-78704]
  - x86/apic: Provide apic_printk() helpers (Jerry Snitselaar) [RHEL-78704]
  - iommu: Manage driver probe deferral better (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Clean up more on probe failure (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Retire probe deferral workaround (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Make instance lookup robust (Jerry Snitselaar) [RHEL-78705]
  - kselftest/arm64: signal: drop now redundant GNU_SOURCE definition (Jerry Snitselaar) [RHEL-78704]
  - selftests: mptcp: extend CFLAGS to keep options from environment (Jerry Snitselaar) [RHEL-78704]
  - selftests: centralize -D_GNU_SOURCE= to CFLAGS in lib.mk (Jerry Snitselaar) [RHEL-78704]
  - of: address: always use dma_default_coherent for default coherency (Jerry Snitselaar) [RHEL-78704]
  - of: also handle dma-noncoherent in of_dma_is_coherent() (Jerry Snitselaar) [RHEL-78704]
  - virtio/vsock: Fix accept_queue memory leak (Jon Maloy) [RHEL-69713] {CVE-2024-53119}
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts (Xin Long) [RHEL-77314] {CVE-2025-21647}
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CKI Backport Bot) [RHEL-86841] {CVE-2025-21993}
  - page_pool: Track DMA-mapped pages and unmap them when destroying the pool (Toke Høiland-Jørgensen) [RHEL-76845]
  - page_pool: Move pp_magic check into helper functions (Toke Høiland-Jørgensen) [RHEL-76845]
  - media: v4l2-mediabus: Drop V4L2_MBUS_CSI2_CONTINUOUS_CLOCK flag (Kate Hsuan) [RHEL-85049]
  - media: v4l2-mediabus: Drop legacy V4L2_MBUS_CSI2_CHANNEL_* flags (Kate Hsuan) [RHEL-85049]
  - media: v4l2-mediabus: Use structures to describe bus configuration (Kate Hsuan) [RHEL-85049]
  - media: v4l2-fwnode: Move bus config structure to v4l2_mediabus.h (Kate Hsuan) [RHEL-85049]
  - mm/gup: Refuse VM_PFNMAP in follow_page() (Donald Dutile) [RHEL-87404]
  - net: tun: unlink NAPI from device on destruction (CKI Backport Bot) [RHEL-80840] {CVE-2022-49672}
  - ata: libata-scsi: Improve CDL control (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Fix ata_msense_control_ata_feature() (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type (Tomas Henzl) [RHEL-72596]
  - ata: libata-sata: Save all fields from sense data descriptor (Tomas Henzl) [RHEL-72596]
  - ata: libata: Fix NCQ Non-Data log not supported print (Tomas Henzl) [RHEL-72596]
  - ata: libata: Improve return value of atapi_check_dma() (Tomas Henzl) [RHEL-72596]
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Tomas Henzl) [RHEL-72596]
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Tomas Henzl) [RHEL-72596]
  - ata: sata_gemini: Remove unused gemini_sata_reset_bridge() (Tomas Henzl) [RHEL-72596]
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Tomas Henzl) [RHEL-72596]
  - ata: Constify struct pci_device_id (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Document all VPD page inquiry actors (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Refactor ata_scsiop_maint_in() (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Refactor ata_scsi_simulate() (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Refactor scsi_6_lba_len() with use of get_unaligned_be24() (Tomas Henzl) [RHEL-72596]
  - ata: Fix typos in the comment (Tomas Henzl) [RHEL-72596]
  - net: fib_rules: Fix iif / oif matching on L3 master device (Antoine Tenart) [RHEL-84584]
  - net: fib_rules: annotate data-races around rule->[io]ifindex (Antoine Tenart) [RHEL-84584]
  - net: Remove likely from l3mdev_master_ifindex_by_index (Antoine Tenart) [RHEL-84584]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-585.el9]
changelog:
  - dmaengine: amd: qdma: Remove using the private get and set dma_ops APIs (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: Revert "dmaengine: qcom: bam_dma: Avoid writing unavailable register" (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Enable Function Level Reset (FLR) for halt (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Refactor halt handler (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Add idxd_device_config_save() and idxd_device_config_restore() helpers (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Binding and unbinding IDXD device and driver (Jerry Snitselaar) [RHEL-78706]
  - bitmap: Define a cleanup function for bitmaps (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Add idxd_pci_probe_alloc() helper (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: qcom: gpi: Add GPI immediate DMA support for SPI protocol (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: bcm2835-dma: Prevent suspend if DMA channel is busy (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: ti: k3-udma: Add support for J722S CSI BCDMA (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: ti: edma: fix OF node reference leaks in edma_driver (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: ti: edma: make the loop condition simpler in edma_probe() (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: qcom: bam_dma: Avoid writing unavailable register (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Remove unused idxd_(un)register_bus_type (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Add a new IAA device ID on Panther Lake family platforms (Jerry Snitselaar) [RHEL-47414]
  - dmaengine: sh: rcar-dmac: add comment for r8a779a0 compatible (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: Move AMD PTDMA driver to amd directory (Jerry Snitselaar) [RHEL-78706]
  - redhat/configs: Add CONFIG_AMD_QDMA (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: amd: qdma: Add AMD QDMA driver (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Remove a useless mutex (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: fix typo in the comment (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Move DSA/IAA device IDs to IDXD driver (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: acpi: Clean up headers (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: acpi: Simplify devm_acpi_dma_controller_register() (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: acpi: Drop unused devm_acpi_dma_controller_free() (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: sh: rz-dmac: add r7s72100 support (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: sh: Kconfig: Make RZ_DMAC depend on ARCH_RZG2L (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: sh: Kconfig: Add ARCH_R9A07G054 dependency for RZ_DMAC config option (Jerry Snitselaar) [RHEL-78706]
  - nvme: print firmware bug note for non-unique identifiers (Bryan Gurney) [RHEL-89350]
  - nvme-pci: add BOGUS_NID quirk for Samsung PM1733 (Bryan Gurney) [RHEL-89350]
  - vsock: Orphan socket after transport release (Jon Maloy) [RHEL-81484] {CVE-2025-21756}
  - vsock: Keep the binding until socket destruction (Jon Maloy) [RHEL-81484] {CVE-2025-21756}
  - bpf, vsock: Invoke proto::close on close() (Jon Maloy) [RHEL-81484] {CVE-2025-21756}
  - RDMA/rxe: Fix the qp flush warnings in req (CKI Backport Bot) [RHEL-72373] {CVE-2024-53229}
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Guillaume Nault) [RHEL-89647] {CVE-2025-37749}
  - cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode (David Arcari) [RHEL-81770]
  - ext4: fix OOB read when checking dotdot dir (CKI Backport Bot) [RHEL-87984] {CVE-2025-37785}
  - ionic: add module eeprom channel data to ionic_if and ethtool (Mohammad Heib) [RHEL-88150]
  - ionic: support ethtool get_module_eeprom_by_page (Mohammad Heib) [RHEL-88150]
  - ionic: extend the QSFP module sprom for more pages (Mohammad Heib) [RHEL-88150]
  - ionic: use ee->offset when returning sprom data (Mohammad Heib) [RHEL-88150]
  - ionic: no double destroy workqueue (Mohammad Heib) [RHEL-88150]
  - ionic: Fix netdev notifier unregister on failure (Mohammad Heib) [RHEL-88150]
  - ionic: remove the unused nb_work (Mohammad Heib) [RHEL-88150]
  - ionic: add support for QSFP_PLUS_CMIS (Mohammad Heib) [RHEL-88150]
  - ionic: add speed defines for 200G and 400G (Mohammad Heib) [RHEL-88150]
  - ionic: Translate IONIC_RC_ENOSUPP to EOPNOTSUPP (Mohammad Heib) [RHEL-88150]
  - ionic: Use VLAN_ETH_HLEN when possible (Mohammad Heib) [RHEL-88150]
  - ionic: add asic codes to firmware interface file (Mohammad Heib) [RHEL-88150]
  - hugetlbfs: support idmapped mounts (CKI Backport Bot) [RHEL-35573]
  - redhat: create 'systemd-volatile-overlay' addon for UKI (Emanuele Giuseppe Esposito) [RHEL-86487]
  - efi: Fix building of efi-pstore when CONFIG_EFI_VARS_PSTORE=m (Lenny Szubowicz) [RHEL-90260]
  - ACPI: processor idle: Revert "avoid call to raw_local_irq_disable() from acpi_safe_halt()" (Waiman Long) [RHEL-22238]
  - ACPI/HMAT: Move HMAT messages to pr_debug() (Steve Dunnagan) [RHEL-70321]
  - cpufreq: Reference count policy in cpufreq_update_limits() (David Arcari) [RHEL-67849]
  - cpufreq/amd-pstate: Use scope based cleanup for cpufreq_policy refs [partial] (David Arcari) [RHEL-67849]
  - platform/x86/amd: amd_3d_vcache: Add sysfs ABI documentation (David Arcari) [RHEL-67849]
  - platform/x86/amd: amd_3d_vcache: Add AMD 3D V-Cache optimizer driver (David Arcari) [RHEL-67849]
  - redhat/configs: enable CONFIG_AMD_3D_VCACHE for x86 on RHEL (David Arcari) [RHEL-67849]
  - enic: get max rq & wq entries supported by hw, 16K queues (Nelson Escobar) [RHEL-84862]
  - enic: cleanup of enic wq request completion path (Nelson Escobar) [RHEL-84862]
  - enic: added enic_wq.c and enic_wq.h (Nelson Escobar) [RHEL-84862]
  - enic: remove unused function cq_enet_wq_desc_dec (Nelson Escobar) [RHEL-84862]
  - enic: enable rq extended cq support (Nelson Escobar) [RHEL-84862]
  - enic: enic rq extended cq defines (Nelson Escobar) [RHEL-84862]
  - enic: enic rq code reorg (Nelson Escobar) [RHEL-84862]
  - enic: Move function from header file to c file (Nelson Escobar) [RHEL-84862]
  - enic: add dependency on Page Pool (Nelson Escobar) [RHEL-84862]
  - enic: remove copybreak tunable (Nelson Escobar) [RHEL-84862]
  - enic: Use the Page Pool API for RX (Nelson Escobar) [RHEL-84862]
  - enic: Simplify RX handler function (Nelson Escobar) [RHEL-84862]
  - enic: Move RX functions to their own file (Nelson Escobar) [RHEL-84862]
  - enic: Fix typo in comment in table indexed by link speed (Nelson Escobar) [RHEL-84862]
  - enic: Obtain the Link speed only after the link comes up (Nelson Escobar) [RHEL-84862]
  - enic: Move RX coalescing set function (Nelson Escobar) [RHEL-84862]
  - enic: Move kdump check into enic_adjust_resources() (Nelson Escobar) [RHEL-84862]
  - enic: Move enic resource adjustments to separate function (Nelson Escobar) [RHEL-84862]
  - enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (Nelson Escobar) [RHEL-84862]
  - enic: Allocate arrays in enic struct based on VIC config (Nelson Escobar) [RHEL-84862]
  - enic: Save resource counts we read from HW (Nelson Escobar) [RHEL-84862]
  - enic: Make MSI-X I/O interrupts come after the other required ones (Nelson Escobar) [RHEL-84862]
  - enic: Create enic_wq/rq structures to bundle per wq/rq data (Nelson Escobar) [RHEL-84862]
  - enic: Report some per queue statistics in ethtool (Nelson Escobar) [RHEL-84862]
  - enic: Report per queue statistics in netdev qstats (Nelson Escobar) [RHEL-84862]
  - enic: Collect per queue statistics (Nelson Escobar) [RHEL-84862]
  - enic: Use macro instead of static const variables for array sizes (Nelson Escobar) [RHEL-84862]
  - enic: add ethtool get_channel support (Nelson Escobar) [RHEL-84862]
  - enic: Validate length of nl attributes in enic_set_vf_port (Nelson Escobar) [RHEL-84862]
  - enic: Replace hardcoded values for vnic descriptor by defines (Nelson Escobar) [RHEL-84862]
  - enic: Avoid false positive under FORTIFY_SOURCE (Nelson Escobar) [RHEL-84862]
  - smb: client: Add check for next_buffer in receive_encrypted_standard() (CKI Backport Bot) [RHEL-83243] {CVE-2025-21844}


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-586.el9]
changelog:
  - net: introduce per netns packet chains (Paolo Abeni) [RHEL-88921]
  - nvme: enable CONFIG_NVME_KEYRING (Maurizio Lombardi) [RHEL-72531]
  - nvmet-auth: always free derived key data (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix out-of-bounds access in nvmet_enable_port (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: cleanup link state management (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: clear CC and CSTS when disabling the controller (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: always fully initialize completion entries (Maurizio Lombardi) [RHEL-72531]
  - nvmet: auth: use NULL to clear a pointer in nvmet_auth_sq_free() (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: sysfs links may not be created for devices (Maurizio Lombardi) [RHEL-72531]
  - nvme: fixup scan failure for non-ANA multipath controllers (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: put ref when assoc->del_work is already scheduled (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: take tgtport reference only once (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: update tgtport ref per assoc (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: inline nvmet_fc_free_hostport (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: inline nvmet_fc_delete_assoc (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: add ref counting to lport (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: replace kref with refcount (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: swap list_add_tail arguments (Maurizio Lombardi) [RHEL-72531]
  - nvme: multipath: fix return value of nvme_available_path (Maurizio Lombardi) [RHEL-72531]
  - nvme: re-read ANA log page after ns scan completes (Maurizio Lombardi) [RHEL-72531]
  - nvme: requeue namespace scan on missed AENs (Maurizio Lombardi) [RHEL-72531]
  - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-72531]
  - crypto,fs: Separate out hkdf_extract() and hkdf_expand() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: disable the target pci-epf module (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: skip nvme_write_sq_db on empty rqlist (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Keep completion queues mapped (Maurizio Lombardi) [RHEL-72531]
  - objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: replace max(a, min(b, c)) by clamp(val, lo, hi) (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Always configure BAR0 as 64-bit (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Remove duplicate uuid_copy (Maurizio Lombardi) [RHEL-72531]
  - nvme: zns: Simplify nvme_zone_parse_entry() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Remove redundant 'flush_workqueue()' calls (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: Remove unused functions (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove stale comment (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: Utilise min3() to simplify queue count calculation (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for queue-depth io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for numa io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for round-robin io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add tls_concat and tls_key debugfs entries (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvmet-tcp: support secure channel concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvmet: Add 'sq' argument to alloc_ctrl_args (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-fabrics: reset admin connection for secure concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-tcp: request secure channel concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-keyring: add nvme_tls_psk_refresh() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_derive_tls_psk() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_generate_digest() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_generate_psk() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: map uring_cmd data even if address is 0 (Maurizio Lombardi) [RHEL-72531]
  - io_uring/nvme: pass issue_flags to io_uring_cmd_import_fixed() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Do not add an IRQ vector if not needed (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Set NVMET_PCI_EPF_Q_LIVE when a queue is fully created (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix stuck reset on concurrent DPC and HP (Maurizio Lombardi) [RHEL-72531]
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (Maurizio Lombardi) [RHEL-72531 RHEL-86914] {CVE-2025-21927}
  - nvme-tcp: Fix a C2HTermReq error message (Maurizio Lombardi) [RHEL-72531]
  - nvmet: remove old function prototype (Maurizio Lombardi) [RHEL-72531]
  - nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: clean up CMBMSC when registering CMB fails (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix possible UAF in nvme_tcp_poll (Maurizio Lombardi) [RHEL-72531]
  - nvme: only allow entering LIVE from CONNECTING state (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: rely on state transitions to handle connectivity loss (Maurizio Lombardi) [RHEL-72531]
  - apple-nvme: Support coprocessors left idle (Maurizio Lombardi) [RHEL-72531]
  - apple-nvme: Release power domains when probe fails (Maurizio Lombardi) [RHEL-72531]
  - nvme/ioctl: add missing space in err message (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Avoid RCU stalls under heavy workload (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Do not uselessly write the CSTS register (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Correctly initialize CSTS when enabling the controller (Maurizio Lombardi) [RHEL-72531]
  - nvmet-rdma: recheck queue state is LIVE in state lock in recv done (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Fix crash when a namespace is disabled (Maurizio Lombardi) [RHEL-72531 RHEL-73614 RHEL-85327] {CVE-2025-21850}
  - nvme-tcp: add basic support for the C2HTermReq PDU (Maurizio Lombardi) [RHEL-72531]
  - nvme: make nvme_tls_attrs_group static (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add a missing endianess conversion in nvmet_execute_admin_connect (Maurizio Lombardi) [RHEL-72531]
  - nvmet: the result field in nvmet_alloc_ctrl_args is little endian (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix a memory leak in controller identify (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: do not ignore connectivity loss during connecting (Maurizio Lombardi) [RHEL-72531]
  - nvme: handle connectivity loss in nvme_set_queue_count (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: go straight to connecting state when initializing (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove redundant dma frees in hmb (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix rw control endian access (Maurizio Lombardi) [RHEL-72531]
  - nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: use correct size to free the hmb buffer (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add error path for xa_store in nvme_init_effects (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix comment typo (Maurizio Lombardi) [RHEL-72531]
  - nvmet: New NVMe PCI endpoint function target driver (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement arbitration feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement interrupt config feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement interrupt coalescing feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement host identifier set feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce get/set_feature controller operations (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Do not require SGL for PCI target controller commands (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add support for I/O queue management admin commands (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_sq_create() and nvmet_cq_create() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_req_transfer_len() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Improve nvmet_alloc_ctrl() interface and implementation (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add PCI transport type (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add drvdata field to struct nvmet_ctrl (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_get_cmd_effects_admin() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Export nvmet_update_cc() and nvmet_cc_xxx() helpers (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add vendor_id and subsys_vendor_id subsystem attributes (Maurizio Lombardi) [RHEL-72531]
  - nvme: Move opcode string helper functions declarations (Maurizio Lombardi) [RHEL-72531]
  - nvme: change return type of nvme_poll_cq() to bool (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add error check for xa_store in nvme_get_effects_log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: handle rw's limited retry flag (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: remove nvme_tcp_destroy_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvmet-loop: avoid using mutex in IO hotpath (Maurizio Lombardi) [RHEL-72531]
  - nvmet: propagate npwg topology (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: 512 byte aligned dma pool segment quirk (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: simplify nvme_tcp_teardown_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: no need to quiesce admin_q in nvme_tcp_teardown_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix the memleak while create new ctrl failed (Maurizio Lombardi) [RHEL-72531] {CVE-2024-56632}
  - nvme-pci: don't use dma_alloc_noncontiguous with 0 merge boundary (Maurizio Lombardi) [RHEL-72531]
  - nvmet: replace kmalloc + memset with kzalloc for data allocation (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove two deallocate zeroes quirks (Maurizio Lombardi) [RHEL-72531]
  - nvme: don't apply NVME_QUIRK_DEALLOCATE_ZEROES when DSM is not supported (Maurizio Lombardi) [RHEL-72531]
  - nvmet: use kzalloc instead of ZERO_PAGE in nvme_execute_identify_ns_nvm() (Maurizio Lombardi) [RHEL-72531]
  - nvme: tuning pr code by using defined structs and macros (Maurizio Lombardi) [RHEL-72531]
  - nvme: introduce change ptpl and iekey definition (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add tracing of reservation commands (Maurizio Lombardi) [RHEL-72531]
  - nvme: parse reservation commands's action and rtype to string (Maurizio Lombardi) [RHEL-72531]
  - nvmet: report ns's vwc not present (Maurizio Lombardi) [RHEL-72531]
  - nvme: check ns's volatile write cache not present (Maurizio Lombardi) [RHEL-72531]
  - nvme: add rotational support (Maurizio Lombardi) [RHEL-72531]
  - nvme: use command set independent id ns if available (Maurizio Lombardi) [RHEL-72531]
  - nvmet: support for csi identify ns (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement rotational media information log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement endurance groups (Maurizio Lombardi) [RHEL-72531]
  - nvmet: declare 2.1 version compliance (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement crto property (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement supported features log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement supported log pages (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement active command set ns list (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement id ns for nvm command set (Maurizio Lombardi) [RHEL-72531]
  - nvmet: support reservation feature (Maurizio Lombardi) [RHEL-72531]
  - nvme-core: remove repeated wq flags (Maurizio Lombardi) [RHEL-72531]
  - nvmet: make nvmet_wq visible in sysfs (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: use dma_alloc_noncontigous if possible (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix freeing of the HMB descriptor table (Maurizio Lombardi) [RHEL-72531] {CVE-2024-56756}
  - nvme: re-fix error-handling for io_uring nvme-passthrough (Maurizio Lombardi) [RHEL-72531]
  - nvme: module parameter to disable pi with offsets (Maurizio Lombardi) [RHEL-72531]
  - nvme: enhance cns version checking (Maurizio Lombardi) [RHEL-72531]
  - vfs: fix race between evice_inodes() and find_inode()&iput() (CKI Backport Bot) [RHEL-63193] {CVE-2024-47679}
  - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-86831]
  - proc: fix UAF in proc_get_inode() (Ian Kent) [RHEL-86809] {CVE-2025-21999}
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del (David Marlin) [RHEL-87889] {CVE-2025-21969}
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CKI Backport Bot) [RHEL-87889] {CVE-2025-21969}
  - scsi: mpi3mr: Event processing debug improvement (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Add level check to control event logging (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Reset the pending interrupt flag (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix pending I/O counter (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Task Abort EH Support (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Mark device strings as nonstring (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update driver version to 8.13.0.5.50 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Check admin reply queue from Watchdog (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update timestamp only for supervisor IOCs (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update MPI Headers to revision 35 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix locking in an error path (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix spelling mistake "skiping" -> "skipping" (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update driver version to 8.12.1.0.50 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Support for Segmented Hardware Trace buffer (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_sas_io_unit_page1: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_sas_io_unit_page0: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_event_data_pcie_topology_change_list: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_event_data_sas_topology_change_list: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (CKI Backport Bot) [RHEL-79805]
  - PCI: Use downstream bridges for distributing resources (Myron Stowe) [RHEL-73396]
  - KVM: arm64: Eagerly switch ZCR_EL{1,2} (Gavin Shan) [RHEL-87960]
  - s390/qdio: Move memory alloc/pointer arithmetic for slib and sl into one place (Mete Durlu) [RHEL-73492]
  - s390/qdio: Rename feature flag aif_osa to aif_qdio (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Clarify zfcp_port refcount ownership during "link" test (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Correct kdoc parameter description for sending ELS and CT (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Switch over to sysfs_emit() (Mete Durlu) [RHEL-73492]
  - s390: Add z17 elf platform (Mete Durlu) [RHEL-89726]
  - ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-89579]
  - ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-89579]
  - ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-89579]
  - ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-89579]
  - ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-89579]
  - ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-89579]
  - ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-89579]
  - ice: Add in/out PTP pin delays (Petr Oros) [RHEL-89579]
  - ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-89579]
  - mptcp: fix spurious wake-up on under memory pressure (Davide Caratti) [RHEL-84571]
  - mptcp: fix NULL pointer in can_accept_new_subflow (Davide Caratti) [RHEL-84571] {CVE-2025-23145}
  - mptcp: Fix data stream corruption in the address announcement (Davide Caratti) [RHEL-84571]
  - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (Davide Caratti) [RHEL-84571] {CVE-2025-21938}
  - mptcp: always handle address removal under msk socket lock (Davide Caratti) [RHEL-84571] {CVE-2025-21875}
  - mptcp: handle fastopen disconnect correctly (Davide Caratti) [RHEL-84571] {CVE-2025-21705}
  - mptcp: consolidate suboption status (Davide Caratti) [RHEL-84571] {CVE-2025-21707}
  - mptcp: be sure to send ack when mptcp-level window re-opens (Davide Caratti) [RHEL-84571]
  - mptcp: pm: only set fullmesh for subflow endp (Davide Caratti) [RHEL-84571] {CVE-2025-21706}
  - mptcp: hold pm lock when deleting entry (Davide Caratti) [RHEL-84571]
  - mptcp: prevent MPC handshake on port-based signal endpoints (Davide Caratti) [RHEL-84571]
  - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-81397] {CVE-2025-21764}
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush() (Derek Barbosa) [RHEL-89346]
  - serial: 8250: Fix fifo underflow on flush (Derek Barbosa) [RHEL-89346]
  - serial: 8250: Adjust the timeout for FIFO mode (Derek Barbosa) [RHEL-89346]
  - tty: serial: 8250: Fix another runtime PM usage counter underflow (Derek Barbosa) [RHEL-89346]
  - Flush console log from kernel_power_off() (Derek Barbosa) [RHEL-89346]
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Derek Barbosa) [RHEL-89346]
  - dev_printk: Add and use dev_no_printk() (Derek Barbosa) [RHEL-89346]
  - printk: Let no_printk() use _printk() (Derek Barbosa) [RHEL-89346]
  - printk: index: Add indexing support to dev_printk (Derek Barbosa) [RHEL-89346]
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Waiman Long) [RHEL-72448]
  - rtc: rzn1: fix BCD to rtc_time conversion errors (Waiman Long) [RHEL-72448]
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Waiman Long) [RHEL-72448] {CVE-2024-56739}
  - rtc: abx80x: Fix WDT bit position of the status register (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Waiman Long) [RHEL-72448]
  - rtc: at91sam9: fix OF node leak in probe() error path (Waiman Long) [RHEL-72448]
  - rtc: interface: Add RTC offset to alarm after fix-up (Waiman Long) [RHEL-72448]
  - rtc: abx80x: Fix return value of nvmem callback on read (Waiman Long) [RHEL-72448]
  - rtc: cmos: Fix return value of nvmem callbacks (Waiman Long) [RHEL-72448]
  - rtc: isl1208: Fix return value of nvmem callbacks (Waiman Long) [RHEL-72448]
  - rtc: mt6397: select IRQ_DOMAIN instead of depending on it (Waiman Long) [RHEL-72448]
  - rtc: Extend timeout for waiting for UIP to clear to 1s (Waiman Long) [RHEL-72448]
  - rtc: Add support for configuring the UIP timeout for RTC reads (Waiman Long) [RHEL-72448]
  - rtc: Adjust failure return code for cmos_set_alarm() (Waiman Long) [RHEL-72448]
  - rtc: mc146818-lib: Adjust failure return code for mc146818_get_time() (Waiman Long) [RHEL-72448]
  - rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call (Waiman Long) [RHEL-72448]
  - rtc: efi: fixed typo in efi_procfs() (Waiman Long) [RHEL-72448]
  - rtc: brcmstb-waketimer: support level alarm_irq (Waiman Long) [RHEL-72448]
  - rtc: stop warning for invalid alarms when the alarm is disabled (Waiman Long) [RHEL-72448]
  - rtc: pcf85363: Allow to wake up system without IRQ (Waiman Long) [RHEL-72448]
  - rtc: rv8803: fix Wvoid-pointer-to-enum-cast warning (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Simplify clk handling in st_rtc_probe() (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Waiman Long) [RHEL-72448]
  - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (Waiman Long) [RHEL-72448]
  - arp: switch to dev_getbyhwaddr() in arp_req_set_public() (Guillaume Nault) [RHEL-84572]
  - net: Add non-RCU dev_getbyhwaddr() helper (Guillaume Nault) [RHEL-84572]
  - ipv4: use RCU protection in inet_select_addr() (Guillaume Nault) [RHEL-84572]
  - ipv4: use RCU protection in rt_is_expired() (Guillaume Nault) [RHEL-84572]
  - ipv4: add RCU protection to ip4_dst_hoplimit() (Guillaume Nault) [RHEL-84572]
  - ipmr: do not call mr_mfc_uses_dev() for unres entries (Guillaume Nault) [RHEL-84572]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-587.el9]
changelog:
  - af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted peer. (Davide Caratti) [RHEL-84598]
  - net/af_packet: check len when min_header_len equals to 0 (Davide Caratti) [RHEL-84598]
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Davide Caratti) [RHEL-84598] {CVE-2024-57901}
  - af_packet: fix vlan_get_tci() vs MSG_PEEK (Davide Caratti) [RHEL-84598] {CVE-2024-57902}
  - af_packet: Handle outgoing VLAN packets without hardware offloading (Davide Caratti) [RHEL-84598]
  - perf trace: Add missing perf_tool__init() (Anubhav Shelat) [RHEL-83634]
  - scsi: iscsi: Fix missing scsi_host_put() in error path (Chris Leech) [RHEL-90552]
  - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (Chris Leech) [RHEL-90552]
  - scsi: iscsi: Remove unused iscsi_create_session() (Chris Leech) [RHEL-90552]
  - scsi: qedi: Use kthread_create_on_cpu() (Chris Leech) [RHEL-90552]
  - scsi: bnx2i: Use kthread_create_on_cpu() (Chris Leech) [RHEL-90552]
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Chris Leech) [RHEL-90552]
  - Revert "mm: kmemleak: alloc gray object for reserved region with direct map" (Luiz Capitulino) [RHEL-75156]
  - cifs: Fix integer overflow while processing closetimeo mount option (CKI Backport Bot) [RHEL-87899] {CVE-2025-21962}
  - cifs: Fix integer overflow while processing acregmax mount option (CKI Backport Bot) [RHEL-87920] {CVE-2025-21964}
  - net: fix geneve_opt length integer overflow (CKI Backport Bot) [RHEL-87973] {CVE-2025-22055}
  - RDMA/core: Silence oversized kvmalloc() warning (Kamal Heib) [RHEL-75591]
  - RDMA/cma: Fix workqueue crash in cma_netevent_work_handler (Kamal Heib) [RHEL-75591]
  - RDMA/ucaps: Avoid format-security warning (Kamal Heib) [RHEL-75591]
  - IB/mad: Check available slots before posting receive WRs (Kamal Heib) [RHEL-75591]
  - RDMA/core: Pass port to counter bind/unbind operations (Kamal Heib) [RHEL-75591]
  - RDMA/core: Add support to optional-counters binding configuration (Kamal Heib) [RHEL-75591]
  - RDMA/core: Create and destroy rdma_counter using rdma_zalloc_drv_obj() (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fix use-after-free when rename device name (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() (Kamal Heib) [RHEL-75591]
  - docs: infiniband: document the UCAP API (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Add support for UCAPs in context creation (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Introduce UCAP (User CAPabilities) API (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fixes infiniband sysctl bounds (Kamal Heib) [RHEL-75591]
  - RDMA/core: Don't expose hw_counters outside of init net namespace (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fix best page size finding when it can cross SG entries (Kamal Heib) [RHEL-75591]
  - IB/iser: fix typos in iscsi_iser.c comments (Kamal Heib) [RHEL-75591]
  - RDMA/core: Use ib_port_state_to_str() for IB state sysfs (Kamal Heib) [RHEL-75591]
  - IB/cache: Add log messages for IB device state changes (Kamal Heib) [RHEL-75591]
  - ext4: avoid writing unitialized memory to disk in EA inodes (Brian Foster) [RHEL-86510]
  - ext4: don't track ranges in fast_commit if inode has inlined data (Brian Foster) [RHEL-86510]
  - ext4: fix possible tid_t sequence overflows (Brian Foster) [RHEL-86510]
  - ext4: use ext4_update_inode_fsync_trans() helper in inode creation (Brian Foster) [RHEL-86510]
  - ext4: use memtostr_pad() for s_volume_name (Brian Foster) [RHEL-86510]
  - ext4: warn if delalloc counters are not zero on inactive (Brian Foster) [RHEL-86510]
  - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-86510]
  - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-86510]
  - ext4: correct the hole length returned by ext4_map_blocks() (Brian Foster) [RHEL-86510]
  - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-86510]
  - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-86510]
  - ext4: propagate errors from ext4_sb_bread() in ext4_xattr_block_cache_find() (Brian Foster) [RHEL-86510]
  - jbd2: remove redundant assignement to variable err (Brian Foster) [RHEL-86510]
  - ext4: remove the redundant folio_wait_stable() (Brian Foster) [RHEL-86510]
  - ext4: fix potential unnitialized variable (Brian Foster) [RHEL-86510]
  - ext4: remove block_device_ejected() (Brian Foster) [RHEL-86510]
  - ext4: keep "prefetch_grp" and "nr" consistent (Brian Foster) [RHEL-86510]
  - ext4: replace deprecated strncpy with alternatives (Brian Foster) [RHEL-86510]
  - ext4: clean up s_mb_rb_lock to fix build warnings with C=1 (Brian Foster) [RHEL-86510]
  - ext4: set the type of max_zeroout to unsigned int to avoid overflow (Brian Foster) [RHEL-86510]
  - ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (Brian Foster) [RHEL-86510]
  - ext4: refactor out ext4_generic_attr_show() (Brian Foster) [RHEL-86510]
  - ext4: refactor out ext4_generic_attr_store() (Brian Foster) [RHEL-86510]
  - ext4: avoid overflow when setting values via sysfs (Brian Foster) [RHEL-86510]
  - ext4: avoid excessive credit estimate in ext4_tmpfile() (Brian Foster) [RHEL-86510]
  - ext4: remove unneeded if checks before kfree (Brian Foster) [RHEL-86510]
  - ext4: set FMODE_CAN_ODIRECT instead of a dummy direct_IO method (Brian Foster) [RHEL-86510]
  - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-83380] {CVE-2024-50301}
  - tracing/histograms: Fix memory leak problem (CKI Backport Bot) [RHEL-81008] {CVE-2022-49648}
  - iommu/arm-smmu-v3: Fix pgsize_bit for sva domains (Marcin Juszkiewicz) [RHEL-92493]
  - redhat: add test_klp_kprobe to mod-internal.list (Denis Aleksandrov) [RHEL-90828]
  - vfio/pci: Align huge faults to order (Alex Williamson) [RHEL-89689]
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (David Arcari) [RHEL-87253] {CVE-2022-3424}
  - x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs (Herton R. Krzesinski) [RHEL-74389]
  - x86: bring back rep movsq for user access on CPUs without ERMS (Herton R. Krzesinski) [RHEL-74389]
  - io_uring: prevent opcode speculation (CKI Backport Bot) [RHEL-83230] {CVE-2025-21863}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-588.el9]
changelog:
  - scsi: mpt3sas: Fix buffer overflow in mpt3sas_send_mctp_passthru_req() (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Mark device strings as nonstring (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Fix spelling mistake "receveid" -> "received" (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: update driver version to 52.100.00.00 (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Send a diag reset if target reset fails (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Report driver capability as part of IOCINFO command (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Add support for MCTP Passthrough commands (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Update MPI headers to 02.00.62 version (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Fix a locking bug in an error path (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Reduce log level of ignore_delay_remove message to KERN_INFO (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Remove unused config functions (Chandrakanth Patil) [RHEL-81907]
  - scsi: Constify struct pci_error_handlers (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1 (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Add details to EEDPTagMode error message (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Update driver version to 51.100.00.00 (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Chandrakanth Patil) [RHEL-81907]
  - Revert "cgroup: Avoid -Wstringop-overflow warnings" (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: Move procfs cpuset attribute under cgroup-v1.c (Radostin Stoyanov) [RHEL-80382]
  - Revert "selftests/cgroup: Drop define _GNU_SOURCE" (Radostin Stoyanov) [RHEL-80382]
  - selftests/cgroup: Fix compile error in test_cpu.c (Radostin Stoyanov) [RHEL-80382]
  - configs: enable CPUSETS_V1 on RHEL (Radostin Stoyanov) [RHEL-80382]
  - mm: memcg: move soft limit reclaim code to memcontrol-v1.c (Radostin Stoyanov) [RHEL-80382]
  - mm: memcg: introduce memcontrol-v1.c (Radostin Stoyanov) [RHEL-80382]
  - mm: remove page_cpupid_xchg_last() (Radostin Stoyanov) [RHEL-80382]
  - mm: use folio_xchg_last_cpupid() in wp_page_reuse() (Radostin Stoyanov) [RHEL-80382]
  - mm: convert wp_page_reuse() and finish_mkwrite_fault() to take a folio (Radostin Stoyanov) [RHEL-80382]
  - mm: make finish_mkwrite_fault() static (Radostin Stoyanov) [RHEL-80382]
  - mm: huge_memory: use folio_xchg_last_cpupid() in __split_huge_page_tail() (Radostin Stoyanov) [RHEL-80382]
  - mm: migrate: use folio_xchg_last_cpupid() in folio_migrate_flags() (Radostin Stoyanov) [RHEL-80382]
  - sched/fair: use folio_xchg_last_cpupid() in should_numa_migrate_memory() (Radostin Stoyanov) [RHEL-80382]
  - mm: add folio_xchg_last_cpupid() (Radostin Stoyanov) [RHEL-80382]
  - mm: remove xchg_page_access_time() (Radostin Stoyanov) [RHEL-80382]
  - mm: huge_memory: use a folio in change_huge_pmd() (Radostin Stoyanov) [RHEL-80382]
  - mm: mprotect: use a folio in change_pte_range() (Radostin Stoyanov) [RHEL-80382]
  - sched/fair: use folio_xchg_access_time() in numa_hint_fault_latency() (Radostin Stoyanov) [RHEL-80382]
  - mm: add folio_xchg_access_time() (Radostin Stoyanov) [RHEL-80382]
  - mm: remove page_cpupid_last() (Radostin Stoyanov) [RHEL-80382]
  - mm: huge_memory: use folio_last_cpupid() in __split_huge_page_tail() (Radostin Stoyanov) [RHEL-80382]
  - mm: memory: use folio_last_cpupid() in do_numa_page() (Radostin Stoyanov) [RHEL-80382]
  - mm: add folio_last_cpupid() (Radostin Stoyanov) [RHEL-80382]
  - mm: huge_memory: use folio_last_cpupid() in do_huge_pmd_numa_page() (Radostin Stoyanov) [RHEL-80382]
  - mm_types: add virtual and _last_cpupid into struct folio (Radostin Stoyanov) [RHEL-80382]
  - Documentation/cgroup-v2: clarify that zswap.writeback is ignored if zswap is disabled (Radostin Stoyanov) [RHEL-80382]
  - selftests: test_zswap: add test for hierarchical zswap.writeback (Radostin Stoyanov) [RHEL-80382]
  - selftests: cgroup: add tests to verify the zswap writeback path (Radostin Stoyanov) [RHEL-80382]
  - selftests: fix the zswap invasive shrink test (Radostin Stoyanov) [RHEL-80382]
  - selftests: add zswapin and no zswap tests (Radostin Stoyanov) [RHEL-80382]
  - selftests: cgroup: update per-memcg zswap writeback selftest (Radostin Stoyanov) [RHEL-80382]
  - selftests: add a sanity check for zswap (Radostin Stoyanov) [RHEL-80382]
  - cgroup/rstat: Selftests for niced CPU statistics (Radostin Stoyanov) [RHEL-80382]
  - cgroup/rstat: Tracking cgroup-level niced CPU time (Radostin Stoyanov) [RHEL-80382]
  - selftests/cgroup: Drop define _GNU_SOURCE (Radostin Stoyanov) [RHEL-80382]
  - selftests: cgroup: remove redundant enabling of memory controller (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: Move cpu.h include to cpuset-internal.h (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: add sefltest for cpuset v1 (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: guard cpuset-v1 code under CONFIG_CPUSETS_V1 (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: rename functions shared between v1 and v2 (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move v1 interfaces to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move validate_change_legacy to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move legacy hotplug update to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: add callback_lock helper (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move memory_spread to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move relax_domain_level to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move memory_pressure to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move common code to cpuset-internal.h (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: introduce cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup: Avoid -Wstringop-overflow warnings (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: add decrease attach_in_progress helpers (Radostin Stoyanov) [RHEL-80382]
  - cgroup/pids: Remove unreachable paths of pids_{can,cancel}_fork (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: Expose cpuset filesystem with cpuset v1 only (Radostin Stoyanov) [RHEL-80382]
  - cgroup: Do not report unavailable v1 controllers in /proc/cgroups (Radostin Stoyanov) [RHEL-80382]
  - cgroup: Disallow mounting v1 hierarchies without controller implementation (Radostin Stoyanov) [RHEL-80382]
  - cgroup: Fix potential overflow issue when checking max_depth (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: Check for partition roots with overlapping CPUs (Radostin Stoyanov) [RHEL-80382]
  - cgroup: clarify css sibling linkage is protected by cgroup_mutex or RCU (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: Remove cpuset_slab_spread_rotor (Radostin Stoyanov) [RHEL-80382]
  - cgroup: update some statememt about delegation (Radostin Stoyanov) [RHEL-80382]
  - redhat: configs: Enable CX231XX driver (Kate Hsuan) [RHEL-86821]
  - media: usb: usbtv: Stop direct calls to queue num_buffers field (Kate Hsuan) [RHEL-86821]
  - media: saa6752hs: Don't set format in sub-device state (Kate Hsuan) [RHEL-86821]
  - media: i2c: Use accessors for pad config 'try_*' fields (Kate Hsuan) [RHEL-86821]
  - redhat: add downstream SBAT for UKI addons (Emanuele Giuseppe Esposito) [RHEL-92594]
  - uki_addons: provide custom SBAT as input parameter (Emanuele Giuseppe Esposito) [RHEL-92594]
  - uki_addons: remove completely sbat/sbat.conf (Emanuele Giuseppe Esposito) [RHEL-92594]
  - fbdev: efifb: Change the return value type to void (Jocelyn Falempe) [RHEL-75953]
  - fbcon: Fix a NULL pointer dereference issue in fbcon_putcs (Jocelyn Falempe) [RHEL-75953]
  - fbdev: efifb: Use devm_register_framebuffer() (Jocelyn Falempe) [RHEL-75953]
  - fbdev: Introduce devm_register_framebuffer() (Jocelyn Falempe) [RHEL-75953]
  - video: Handle HAS_IOPORT dependencies (Jocelyn Falempe) [RHEL-75953]
  - fbcon: Use oops_in_progress instead of panic_cpu (Jocelyn Falempe) [RHEL-75953]
  - fbcon: Add an option to disable fbcon in panic (Jocelyn Falempe) [RHEL-75953]
  - mm: gup: fix infinite loop within __get_longterm_locked (Waiman Long) [RHEL-89519]
  - udmabuf: fix racy memfd sealing check (Waiman Long) [RHEL-89519]
  - udmabuf: udmabuf_create pin folio codestyle cleanup (Waiman Long) [RHEL-89519]
  - udmabuf: pre-fault when first page fault (Waiman Long) [RHEL-89519]
  - selftests/udmabuf: add tests to verify data after page migration (Waiman Long) [RHEL-89519]
  - udmabuf: pin the pages using memfd_pin_folios() API (Waiman Long) [RHEL-89519]
  - docs: hugetlbpage.rst: add hugetlb migration description (Waiman Long) [RHEL-89519]
  - mm: hugetlb: make the hugetlb migration strategy consistent (Waiman Long) [RHEL-89519]
  - mm: record the migration reason for struct migration_target_control (Waiman Long) [RHEL-89519]
  - selftests: drivers/dma-buf: Improve message in selftest summary (Waiman Long) [RHEL-89519]
  - selftests: drivers/dma-buf: Fix implicit declaration warns (Waiman Long) [RHEL-89519]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-589.el9]
changelog:
  - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CKI Backport Bot) [RHEL-70062] {CVE-2024-53135}
  - PCI/ACS: Fix 'pci=config_acs=' parameter (Myron Stowe) [RHEL-72898]
  - Documentation: Fix pci=config_acs= example (Myron Stowe) [RHEL-72898]
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CKI Backport Bot) [RHEL-93256] {CVE-2025-37943}
  - wifi: mac80211: fix MPDU length parsing for EHT 5/6 GHz (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: cancel wiphy_work before freeing wiphy (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21979}
  - wifi: mac80211: fix SA Query processing in MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: nl80211: fix assoc link handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: don't queue sdata::work for a non-running sdata (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: trans: cancel restart work on op mode leave (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: pcie: Fix TSO preparation (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: nl80211: disable multi-link reconfiguration (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: regulatory: improve invalid hints checking (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21910}
  - wifi: brcmfmac: keep power during suspend if board requires it (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Fix sparse warning for monitor_sdata (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix vendor-specific inheritance (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix MLE non-inheritance parsing (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21951}
  - wifi: iwlwifi: Fix A-MSDU TSO preparation (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: Free pages allocated when failing to build A-MSDU (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: limit printed string from FW file (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21905}
  - wifi: iwlwifi: mvm: use the right version of the rate API (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: don't try to talk to a dead firmware (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21930}
  - wifi: iwlwifi: mvm: don't dump the firmware state upon RFKILL while suspend (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: clean up ROC on failure (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21906}
  - wifi: iwlwifi: fw: avoid using an uninitialized variable (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: fw: allocate chained SG tables for dump (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: remove debugfs dir for virtual monitor (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Cleanup sta TXQs on flush (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: nl80211: reject cooked mode if it is set along with other flags (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21909}
  - wifi: brcmfmac: use random seed flag for BCM4355 and BCM4364 firmware (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix handling of 6 GHz rules (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21744}
  - wifi: rtw88: add RTW88_LEDS depends on LEDS_CLASS to Kconfig (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: unregister wiphy only after netdev registration (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: adjust allocation of colocated AP data (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix memory leak in ieee80211_mgd_assoc_ml_reconf() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix key cache handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Fix uninitialized variable access in ath12k_mac_allocate() function (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Remove ath12k_get_num_hw() helper function (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Refactor the ath12k_hw get helper function argument (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Refactor ath12k_hw set helper function argument (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: add implicit beamforming support for mt7992 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix beacon command during disabling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix ldpc setting (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix definition of tx descriptor (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: connac: adjust phy capabilities based on band constraints (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix incorrect indexing of MIB FW event (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix HE Phy capability (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: add max mpdu len capability (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7921: avoid undesired changes of the preset regulatory domain (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925e: fix too long of wifi resume time (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: add handler to hif suspend/resume event (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: fix CLC command timeout when suspend/resume (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: fix the unfinished command of regd_notifier before suspend (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix register mapping (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: fix register mapping (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix monitor mode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: switch to single multi-radio wiphy (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: move all debugfs files to the primary phy (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: connac: rework connac helpers (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: prepare mt7996_mcu_update_bss_color for MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: connac: prepare mt76_connac_mcu_sta_basic_tlv for MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: prepare mt7996_mcu_set_timing for MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: prepare mt7996_mcu_set_tx for MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: prepare mt7996_mcu_add_beacon for MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: prepare mt7996_mcu_add_dev/bss_info for MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: pass wcid to mt7996_mcu_sta_hdr_trans_tlv (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: use emulated hardware scan support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: add multi-radio remain_on_channel functions (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: add multi-radio support to scanning code (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: add multi-radio support to tx scheduling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: add multi-radio support to a few core hw ops (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: remove dev->wcid_phy_mask (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: add chanctx functions for multi-channel phy support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: initialize more wcid fields mt76_wcid_init (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: split link specific data from struct mt7996_vif (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: add vif link specific data structure (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: rename struct mt76_vif to mt76_vif_link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: add support for allocating a phy without hw (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: add code for emulating hardware scanning (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: do not add wcid entries to sta poll list during MCU reset (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: use mac80211 .sta_state op (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: fix omac index assignment after hardware reset (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: firmware restart on devices with a second pcie link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: hold dev->mutex while interacting with the thermal state (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: ensure that only one sta entry is active per mac address (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: only enable tx worker after setting the channel (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: decrease timeout for commonly issued MCU commands (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: reduce the number of command retries (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix rx filter setting for bfee functionality (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: fix eifs value on older chipsets (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: fix slot time for 5/6GHz (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: remove phy->monitor_vif (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: remove mt76_calculate_default_rate() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7921u: Add VID/PID for TP-Link TXE50UH (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: replace zero-length array with flexible-array member (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7921: add rfkill_poll for hardware rfkill (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7921: introduce CSA support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: config the dwell time by firmware (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: do not hold queue lock during initial rx buffer alloc (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Properly handle responses for commands with events (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Cleanup MLO settings post-disconnection (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Update mt7925_mcu_uni_[tx,rx]_ba for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Init secondary link PM state (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Update secondary link PS flow (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Update mt7925_unassign_vif_chanctx for per-link BSS (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Update mt792x_rx_get_wcid for per-link STA (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Update mt7925_mcu_sta_update for BC in ASSOC state (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: Enhance mt7925_mac_link_sta_add to support MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Enhance mt7925_mac_link_bss_add to support MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Fix CNM Timeout with Single Active Link in MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: fix wrong parameter for related cmd of chan info (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Fix incorrect WCID phy_idx assignment (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Fix incorrect WCID assignment for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Fix incorrect MLD address in bss_mld_tlv for MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: connac: Extend mt76_connac_mcu_uni_add_dev for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: exclude tx backoff time from airtime (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: exclude tx backoff time from airtime (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: fix overflows seen when writing limit attributes (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix overflows seen when writing limit attributes (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: fix the invalid ip address for arp offload (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: fix get wrong chip cap from incorrect pointer (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: fix wrong band_idx setting when enable sniffer mode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-81384] {CVE-2024-57989}
  - wifi: mt76: introduce mt792x_config_mac_addr_list routine (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: Fix an error handling path in mt7915_add_interface() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7921: fix using incorrect group cipher after disconnection. (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: avoid double free in auth/assoc timeout (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: ibss: mark IBSS left before leaving (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: ibss: stop transmit when merging IBSS (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: don't flush non-uploaded STAs (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-82497] {CVE-2025-21828}
  - wifi: mac80211: set key link ID to the deflink one (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: pass correct link ID on assoc (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: simplify nested if checks (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: nl80211: simplify nested if checks (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Support parsing EPCS ML element (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Fix common size calculation for ML element (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: Add support for controlling EPCS (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Support dynamic link addition and removal (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Pull link space calculation to a function (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Refactor adding association elements (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: Add support for dynamic addition/removal of links (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: nl80211: Split the links handling of an association request (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ieee80211: Add some missing MLO related definitions (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: nl80211: fix nl80211_start_radar_detection return value (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: skip regulatory for punctured subchannels (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix tid removal during mesh forwarding (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: rename iwl_datapath_monitor_notif::mac_id to link_id (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: pcie: make iwl_pcie_d3_complete_suspend() static (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: pcie: make _iwl_trans_pcie_gen2_stop_device() static (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: remove unused tas_rsp variable (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: handle version 3 GET_TAS_STATUS notification (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: extend TAS_CONFIG cmd support for v5 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: remove Mr/Ms radio (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: add WIKO to PPAG approved list (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: support EMLSR on WH/PE (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: config: unify fw/pnvm MODULE_FIRMWARE (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: improve/fix chanctx min_def use logic (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: implement reset escalation (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: implement product reset for TOP errors (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: get the max number of links from the firmware (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: pcie: check for WiAMT/CSME presence (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: Move cfg80211_scan_req_add_chan() n_channels increment earlier (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: prohibit deactivating all links (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-58061}
  - wifi: mac80211: tests: add utility to create sdata skeleton (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: also verify requirements in EXT_SUPP_RATES (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: verify BSS membership selectors and basic rates (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: nl80211: permit userspace to pass supported selectors (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: parse BSS selectors and unknown rates (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: skip all known membership selectors (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: log link information in ieee80211_determine_chan_mode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix typo in HE MCS check (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Remove unused basic_rates variable (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: improve stop/wake queue tracing (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: check extended MLD capa/ops in assoc (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: scan: skip duplicate RNR entries (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: mlme: improve messages from config_bw() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: reject per-band vendor elements with MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: clarify key idx documententaion (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: remove an unneeded check in Rx (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: add some support for RX OMI power saving (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: fw: fix repeated words in comments (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Fix duplicated 'the' in comment (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Fix duplicated 'if' in comment (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: Remove a duplicate assignment in iwl_dbgfs_amsdu_len_write() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Use helper function IS_ERR_OR_NULL() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: Fix spelling typo in comment (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: api: remove the double word (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: fix iwl_ssid_exist() check (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Improve code style in pointer declarations (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: fw: fix typo 'adderss' (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: remove unneeded NULL pointer checks (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: fix AP STA comparison (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: cleanup unused variable in trans.h (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: don't count mgmt frames as MPDU (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: fw: api: tdls: remove MVM_ from name (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: avoid NULL pointer dereference (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-82447] {CVE-2024-58062}
  - wifi: iwlwifi: bump FW API to 96 for BZ/SC devices (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: fix add stream vs. restart race (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: move fw_dbg_collect to fw debugfs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: api: remove version number from latest stored_beacon_notif (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: avoid memory leak (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mark that we support TX_CMD_API_S_VER_10 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: add channel_load_not_by_us in iwl_mvm_phy_ctxt (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: add mapping of prph register crf for PE RF (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: Allow entering EMLSR for more band combinations (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: iwl-drv: refactor image loading a bit (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: Remove MVM prefix from TX API macros (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: rename bits in config/boot control register (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: move fw_ver debugfs to firmware runtime (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mld: make iwl_mvm_find_ie_offset a iwlwifi util (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: iwl_fw_error_collect() is always called sync (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: rework firmware error handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: restart device through NMI (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: unify cmd_queue_full() into nic_error() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: clean up FW restart a bit (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: remove STARTING state (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: restrict MAC start retry to timeouts (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: restrict driver retry loops to timeouts (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: return ERR_PTR from opmode start() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: context-info: add kernel-doc markers (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: interpret STEP URM BIOS configuration (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: fw: read STEP table from correct UEFI var (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: rename iwl_dev_tx_power_common::mac_context_id (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: skip short statistics window when updating EMLSR (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: remove warning on unallocated BAID (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: differentiate NIC error types (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Remove unused ieee80211_smps_is_restrictive (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Move TSO code to shared utility (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: add UHB canada support in GET_TAS_STATUS cmd resp (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: add UHB canada support in TAS_CONFIG cmd (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Use IWL_FW_CHECK() for BAR notif size validation (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: pcie: Add support for new device ids (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: add a new NMI type (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Check BAR packet size before accessing data (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version 8 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: support BIOS override for UNII4 in CA/US also in LARI versions < 12 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: bump FW API to 95 for BZ/SC devices (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: log error for failures after D3 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: update documentation for iwl_nvm_channel_flags (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: Remove mvm prefix from iwl_mvm_compressed_ba_notif (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mvm: Request periodic system statistics earlier (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: remove mvm from session protection cmd's name (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: copy multi-link element from the multi-link probe request's frame body to the generated elements (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: cleanup iwl_mvm_sta_del (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: change disassoc sequence a bit (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: add an option to filter a sta from being flushed (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: send the right link id (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: remove pre-mld code from mld path (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: fix documentation about initial values in station table (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Clean up debugfs_key deadcode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7921: fix a potential scan no APs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: Fix EHT NSS radiotap reporting. (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: Add eht radiotap tlv (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7615: Convert comma to semicolon (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-81561] {CVE-2024-57990}
  - wifi: mt76: mt7921s: fix a potential firmware freeze during startup (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt792x: add P2P_DEVICE support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: set correct background radar capability (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: add support for more variants (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: extend flexibility of mt7996_mcu_get_eeprom() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: remove get_task_comm() and print task comm directly (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - kernel-wide: add explicity||explicitly to spelling.txt (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add support for LED blinking (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: sdio: Fix disconnection after beacon loss (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: 8703b: Fix RX/TX issues (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Delete rf_type member of struct rtw_sta_info (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add USB PHY configuration (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922ae: add variant info to support RTL8922AE-VS (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: read hardware capabilities part 1 via firmware command (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-81370] {CVE-2025-21729}
  - wifi: rtw89: mcc: consider time limits not divisible by 1024 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: pci: treat first receiving part as first segment for 8922AE (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: avoid to init mgnt_entry list twice when WoWLAN failed (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21730}
  - wifi: rtw89: correct header conversion rule for MLO only (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: chan: fix soft lockup in rtw89_entity_recalc_mgnt_roles() (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-57991}
  - wifi: rtw89: fix proceeding MCC with wrong scanning state after sequence changes (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: cleanup ath9k_hw_get_nf_hist_mid() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support pdev Puncture Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support AST Entry Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support Transmit Buffer OFDMA Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support Transmit Rate Buffer Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: Add missing Return: to function documentation (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rt2x00: Remove unused rfval values (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: Check the return value of of_property_read_string_index() (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21750}
  - wifi: wilc1000: unregister wiphy only if it has been registered (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-57992}
  - wifi: mt76: mt7996: fix invalid interface combinations (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - bus: mhi: host: pci_generic: Enable MSI-X if the endpoint supports (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix tx power, max reg power update to firmware (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: set flag for mgmt no-ack frames in Tx completion (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Include MLO memory in firmware coredump collection (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: handle radar detection with MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix CAC running state during virtual interface start (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: rename CAC_RUNNING flag (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: pci: disable PCI completion timeout control (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - bus: mhi: host: pci_generic: Add support for QDU100 device (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtl8xxxu: Fix RTL8188EU firmware upload block size (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: debug: print regd for QATAR/UK/THAILAND (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: adjust thermal protection step and more RTL8852BE-VT ID (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: usb: Preallocate and reuse the RX skbs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Handle C2H_ADAPTIVITY in rtw_fw_c2h_cmd_handle() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: usb: Copy instead of cloning the RX skb (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: 8821a/8812a: Set ptct_efuse_size to 0 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: 8812a: Support RFE type 2 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: rtl8821ae: Fix media status report (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: add __packed attribute to efuse layout struct (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Fix spelling mistake "requestted" -> "requested" (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Avoid explicit type cast in monitor status parse handler (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Change the Tx monitor SRNG ring ID (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Remove unused HAL Rx mask in DP monitor path (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix incorrect TID updation in DP monitor status path (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Fix the misspelled of hal TLV tag HAL_PHYRX_GENERICHT_SIG (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: cleanup Rx peer statistics structure (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Refactor monitor status TLV structure (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Add documentation HTT_H2T_MSG_TYPE_RX_RING_SELECTION_CFG (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Decrease ath12k_mac_station_assoc() stack usage (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Decrease ath12k_sta_rc_update_wk() stack usage (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Decrease ath12k_bss_assoc() stack usage (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Decrease ath12k_mac_op_remain_on_channel() stack usage (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Add support for parsing 64-bit TLVs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: simplify internal time management (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: cleanup a few (mostly) TX-related routines (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: cleanup ath_txq_skb_done() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: clarify unmodifiable headroom log message (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: advertise MLO support and capabilities (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: assign unique hardware link IDs during QMI host cap (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add ATH12K_FW_FEATURE_MLO capability firmware feature (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: remove warning print in htt mlo offset event message (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add no-op without debug print in WMI Rx event (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add can_activate_links mac operation (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: symmetrize scan vdev creation and deletion during HW scan (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: pass link ID during MLO while delivering skb (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix ar->supports_6ghz usage during hw register (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix ath12k_qmi_alloc_chunk() to handle too large allocations (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: advertise multi device interface combination (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Refactor radio frequency information (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: introduce interface combination cleanup helper (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add helper function to init partner cmem configuration (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add partner device buffer support in receive data path (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: move to HW link id based receive handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: avoid redundant code in DP Rx error process (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: enable MLO setup and teardown from core (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Add MLO WMI setup and teardown functions (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add support to allocate MLO global memory region (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: refactor ath12k_qmi_alloc_target_mem_chunk() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: send partner device details in QMI MLO capability (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: net: wireless: Describe ath12k PCI module with WSI (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: parse multiple device information from Device Tree (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: add missing header include for brcmf_dbg (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-81283] {CVE-2024-58014}
  - wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-81445] {CVE-2024-57995}
  - wifi: rtw89: phy: add dummy C2H event handler for report of TAS power (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8851b: rfk: remove unnecessary assignment of return value of _dpk_dgain_read() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852c: rfk: refine target channel calculation in _rx_dck_channel_calc() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: pci: wait for firmware loading before releasing memory (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: fix memory leaks and invalid access at probe error path (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-58063}
  - wifi: rtlwifi: destroy workqueue at rtl_deinit_core (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: remove unused check_buddy_priv (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-82463] {CVE-2024-58072}
  - wifi: rtw89: 8922a: update format of RFK pre-notify H2C command v2 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: regd: update regulatory map to R68-R51 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852c: disable ER SU when 4x HE-LTF and 0.8 GI capability differ (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: disable firmware training HE GI and LTF (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: ps: update data for firmware and settings for hardware before/after PS (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: ps: refactor channel info to firmware before entering PS (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: ps: refactor PS flow to support MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Off by one in ath12k_wmi_process_csa_switch_count_event() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix leaking michael_mic for non-primary links (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mwifiex: decrease timeout waiting for host sleep from 10s to 5s (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: fix brcmf_vif_clear_mgmt_ies when stopping AP (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: fix scatter-gather handling by detecting end of sg list (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: introduce mlo_capable flag for device group (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: send QMI host capability after device group is ready (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: move struct ath12k_hw from per device to group (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: refactor core start based on hardware group (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: introduce device group abstraction (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: rename mlo_capable_flags to single_chip_mlo_supp (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: move ATH12K_FLAG_REGISTERED handling to ath12k_mac_register() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: add crystal_cap check to avoid setting as overflow value (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: refine link handling for link_sta_rc_update (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922a: use RSSI from PHY report in RX descriptor (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852bt: add beacon filter and CQM support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852b: add beacon filter and CQM support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922a: Extend channel info field length for scan (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211_hwsim: add 6 GHz EHT Mesh capabilities (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: add EHT 320 MHz support for mesh (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: ethtool: add monitor channel reporting (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: get tx power per link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: send MLO links tx power info in GET_INTERFACE (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Replace spaces for tabs in iwl_mvm_vendor_events_idx (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: use wiphy guard (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: define and use wiphy guard (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Accept authentication frames on P2P device (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix variable used in for_each_sdata_link() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix vif addr when switching from monitor to station (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-57899}
  - bus: mhi: host: Free mhi_buf vector inside mhi_alloc_bhie_table() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: introduce QMI firmware ready flag (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add ath12k_get_num_hw() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add ath12k_ab_to_ah() and ath12k_ab_set_ah() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Refactor core startup (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_mac_op_sta_rc_update(): use mac80211 provided link id (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_mac_op_set_key(): fix uninitialized symbol 'ret' (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: defer vdev creation for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_bss_assoc(): MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: do not return invalid link id for scan link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_mac_station_add(): fix potential rx_stats leak (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_mac_op_ampdu_action(): MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_mac_op_flush(): MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_mac_op_tx(): MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: convert struct ath12k::wmi_mgmt_tx_work to struct wiphy_work (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: pass target link_id to ieee80211_nullfunc_get() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: pass target link_id to ieee80211_gtk_rekey_add() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: apply MLD pairwise key to dynamically active links (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: implement ops of change vif/sta links (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: register ops of can_activate_links (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922a: configure AP_LINK_PS if FW supports (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Use mac80211 sta's link_sta instead of deflink (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Use mac80211 vif's link_conf instead of bss_conf (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: modify chanctx iterators for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add reo queue lookup table for ML peers (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: use arsta instead of sta (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add primary link for data path operations (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: support change_sta_links() mac80211 op (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Add MLO station state change handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: mark ath11k_wow_convert_8023_to_80211() as noinline (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: mark ath11k_dp_rx_mon_mpdu_pop() as noinline (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: mark some QMI driver event helpers as noinline (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Fix inappropriate use of print_array_to_buf_index() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: add support for QCA6698AQ (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: miscellaneous spelling fixes (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: cleanup struct ath11k_mon_data (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: cleanup struct ath11k_reg_tpc_power_info (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: cleanup struct ath11k_vif (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Fix endianness issue in struct hal_tlv_64_hdr (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: usb: Enable RX aggregation for 8821au/8812au (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: usb: Support USB 3 with RTL8812AU (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support MBSSID Control Frame Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support Transmit PER Rate Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support SoC Common Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support phy counter and TPC stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support Downlink Pager Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: Add RX inactivity detection and reset chip when it occurs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtl8xxxu: add more missing rtl8192cu USB IDs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: handle different TX power between RF path (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: introduce dynamic antenna gain feature (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: sar: tweak 6GHz SAR subbands span (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: usb: fix workqueue leak when probe fails (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: fix init_sw_vars leak when probe fails (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: wait for firmware loading before releasing memory (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: do not complete firmware loading needlessly (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add additional USB IDs for RTL8812BU (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: 8812au: Add more device IDs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: 8821au: Add additional devices to the USB_DEVICE list (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Fix for out-of bound access error (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-81420] {CVE-2024-58015}
  - wifi: ath9k: miscellaneous spelling fixes (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: pass MBSSID config by reference (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Support EHT 1024 aggregation size in TX (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: rfkill: gpio: Add check for clk_enable() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-56593}
  - wifi: brcmfmac: release 'root' node in all execution paths (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: don't call power_update_mac in fast suspend (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: s/IWL_MVM_INVALID_STA/IWL_INVALID_STA (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: bump minimum API version in BZ/SC to 92 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: move IWL_LMAC_*_INDEX to fw/api/context.h (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: be less noisy if the NIC is dead in S3 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: support new initiator and responder command version (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: use wiphy locked debugfs for low-latency (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: MLO scan upon channel condition degradation (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: support new versions of the wowlan APIs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: allow always calling iwl_mvm_get_bss_vif() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: unify link info initialization (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: clarify fw_id_to_link_sta protection (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: Fix an error handling path in nl80211_start_ap() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix description of ieee80211_set_active_links() for new sequence (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - _RESEND_PATCH_v2_04_19_wifi_rt2x00_Remove_redundant_hrtimer_init_ (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Add MLO peer assoc command support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add helper to find multi-link station (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add multi-link flag in peer create command (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Add helpers for multi link peer creation and deletion (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: introduce ath12k_hw_warn() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Refactor sta state machine (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: MLO vdev bringup changes (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_mac_vdev_create(): use goto for error handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: mark QMI driver event helpers as noinline (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: Suspend hardware before firmware mode off for WCN6750 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: Remove some exhalbtc deadcode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Enable the new RTL8821AU/RTL8812AU drivers (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add rtw8821au.c and rtw8812au.c (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add rtw8812a.{c,h} (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add rtw8821a.{c,h} (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add rtw88xxa.{c,h} (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add rtw8821a_table.{c,h} (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add rtw8812a_table.{c,h} (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: coex: set higher priority to BT when WL scan and BT A2DP exist (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852b: change RF mode to normal mode when set channel (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922a: fill the missing OP1dB configuration (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: mac: no configure CMAC/DMAC tables for firmware secure boot (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: fw: use common function to parse security section for WiFi 6 chips (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: fw: move v1 MSSC out of __parse_security_section() to share with v0 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: fw: set recorded IDMEM share mode in firmware header to register (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: fw: shrink download size of security section for RTL8852B (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: efuse: read firmware secure info v0 from efuse for WiFi 6 chips (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: efuse: move recognize firmware MSS info v1 to common (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: efuse: move reading efuse of fw secure info to common (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: set pause_data field to avoid transmitting data in scan channels (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: don't check done-ack for entering PS (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcm80211: Remove unused dma_txflush() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: 8812a: Mitigate beacon loss (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: 8821a: Regularly ask for BT info updates (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: coex: Support chips without a scoreboard (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Detect beacon loss with chips other than 8822c (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: usb: Set pkt_info.ls for the reserved page (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Move pwr_track_tbl to struct rtw_rfe_def (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Support TX page sizes bigger than 128 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Make txagc_remnant_ofdm an array (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Enable data rate fallback for older chips (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Let each driver control the power on/off process (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Allow rtw_chip_info.ltecoex_addr to be NULL (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Extend the init table parsing for RTL8812AU (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Allow different C2H RA report sizes (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Dump the HW features only for some chips (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add some definitions for RTL8821AU/RTL8812AU (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Report the signal strength only if it's known (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922a: extend RFK handling and consider MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: tweak setting of channel and TX power for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: chan: manage active interfaces (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: Add encryption support for MLO connections (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: Add header conversion for MLO connections (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: convert tasklet to BH workqueue for CE interrupts (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: unlock on error path in rtw89_ops_unassign_vif_chanctx() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: coex: Set Wi-Fi/Bluetooth priority for Wi-Fi scan case (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: fix -Wenum-compare-conditional warnings (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: use MODULE_FIRMWARE() to declare used firmware (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Refactor looping in rtw_phy_store_tx_power_by_rate (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: regd: block 6 GHz if marked as N/A in regd map (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: pci: add quirks by PCI subsystem ID for thermal protection (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: add thermal protection (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix A-MSDU indication in monitor mode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: use tail MSDU to get MSDU information (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: delete NSS and TX power setting for monitor vdev (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix struct hal_rx_mpdu_start (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix struct hal_rx_phyrx_rssi_legacy_info (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix struct hal_rx_ppdu_start (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix struct hal_rx_ppdu_end_user_stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: remove unused variable monitor_present (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - mac80211: Remove NOP call to ieee80211_hw_config (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: work around -Wenum-compare-conditional warning (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: re-order assigning channel in activate links (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - fs: debugfs: fix open proxy for unsafe files (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - debugfs: fix missing mutex_destroy() in short_fops case (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - fs: debugfs: differentiate short fops with proxy ops (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: convert debugfs files to short fops (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - debugfs: add small file operations for most files (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - debugfs: Document that debugfs_create functions need not be error checked (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - debugfs: lockdown: Allow reading debugfs files that are not world readable (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: remove misleading j_0 construction parts (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211_hwsim: use hrtimer_active() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: refactor BW limitation check for CSA parsing (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: filter on monitor interfaces based on configured channel (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: refactor ieee80211_rx_monitor (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: add support for the monitor SKIP_TX flag (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: add monitor SKIP_TX flag (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: add flag to opt out of virtual monitor support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: pass net_device to .set_monitor_channel (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: remove status->ampdu_delimiter_crc (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: report per wiphy radio antenna mask (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: use vif radio mask to limit creating chanctx (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: use vif radio mask to limit ibss scan frequencies (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: add option for vif allowed radios (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: allow IWL_FW_CHECK() with just a string (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: remove redundant check (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: fw: add an error table status getter (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: do not warn about a flush with an empty TX queue (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: remove IWL_MVM_HW_CSUM_DISABLE (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: remove unneeded check (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Remove redundant rcu_read_lock() in reorder buffer (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Remove unused last_amsdu from reorder buffer (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: fw: api: update link context API version (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: log information about HW restart completion (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: prepare the tx_power handling to be per-link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: exit EMLSR earlier if bss_param_ch_cnt is updated (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Add support for prep_add_interface() callback (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: expose ieee80211_chan_width_to_rx_bw() to drivers (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: chan: calculate min_def also for client mode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: add an option to fake ieee80211_connection_loss (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: parse A-MSDU len from EHT capabilities (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: call rate_control_rate_update() for link STA (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: allow rate_control_rate_init() for links (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: update the right link for tx power (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: __ieee80211_recalc_txpower receives a link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: ieee80211_recalc_txpower receives a link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: remove unneeded parameters (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: make bss_param_ch_cnt available for the low level driver (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: rename IEEE80211_CHANCTX_CHANGE_MIN_WIDTH (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: disallow SMPS in AP mode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Add support to indicate that a new interface is to be added (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: sar: add supported UNII-4 frequency range along with UNII-3 of SAR subband (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852c: use 'int' as return type of error code pwr_{on,off}_func() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852bt: use 'int' as return type of error code pwr_{on,off}_func() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852b: use 'int' as return type of error code pwr_{on,off}_func() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8851b: use 'int' as return type of error code pwr_{on,off}_func() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: pci: use 'int' as return type of error code in poll_{tx,rx}dma_ch_idle() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: wow: cast nd_config->delay to u64 in tsf arithmetic (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-56539}
  - wifi: brcmfmac: of: use devm_clk_get_optional_enabled_with_rate() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - clk: provide devm_clk_get_optional_enabled_with_rate() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmsmac: Remove unused brcms_debugfs_get_devdir() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: Remove unused brcmf_cfg80211_get_iftype() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: Set MAC after operation mode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mwifiex: cleanup struct mwifiex_private (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mwifiex: cleanup struct mwifiex_auto_tdls_peer (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: Add WILC3000 support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: Register wiphy after reading out chipid (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: Fold wilc_create_wiphy() into cfg80211.c (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: Fill in missing error handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: Fold chip_allow_sleep()/chip_wakeup() into wlan.c (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: Clean up usage of wilc_get_chipid() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: Keep slot powered on during suspend/resume (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rt2x00: convert comma to semicolon (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: modify link arvif creation and removal for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: update ath12k_mac_op_update_vif_offload() for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: update ath12k_mac_op_conf_tx() for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: modify ath12k_mac_op_set_key() for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: modify ath12k_mac_op_bss_info_changed() for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: modify ath12k_get_arvif_iter() for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: modify ath12k_mac_vif_chan() for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: prepare vif config caching for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: prepare sta data structure for MLO handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: pass ath12k_link_vif instead of vif/ahvif (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: prepare vif data structure for MLO handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support BE OFDMA Pdev Rate Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support Pdev Scheduled Algorithm Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support DMAC Reset Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Add firmware coredump collection support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add missing lockdep_assert_wiphy() for ath12k_mac_op_ functions (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath10k: avoid NULL pointer error during sdio remove (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-56599}
  - wifi: ath12k: ath12k_mac_op_sta_state(): clean up update_wk cancellation (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_mac_set_key(): remove exit label (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: cleanup unneeded labels (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: switch to using wiphy_lock() and remove ar->conf_mutex (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: convert struct ath12k_sta::update_wk to use struct wiphy_work (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-56607}
  - wifi: ath12k: Support Pdev OBSS Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support pdev CCA Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support pdev Transmit Multi-user stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support Ring and SFM stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support Self-Generated Transmit stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: wow: do not configure CPU IO to receive packets for old firmware (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: coex: Add function to reorder Wi-Fi firmware report index (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: coex: Solved BT PAN profile idle decrease Wi-Fi throughput (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: coex: Reorder Bluetooth info related logic (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: coex: Update priority setting for Wi-Fi is scanning (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - Revert "wifi: cfg80211: unexport wireless_nlevent_flush()" (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wireless: wext: shorten struct iw_ioctl_description (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: unexport wireless_nlevent_flush() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: remove iw_public_data from struct net_device (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: stop exporting wext symbols (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wext/libipw: move spy implementation to libipw (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ipw2x00/lib80211: move remaining lib80211 into libipw (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mwifiex: don't include lib80211.h (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: nl80211: remove redundant null pointer check in coalescing (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - mac80211: Reorganize kerneldoc parameter names (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211, cfg80211: miscellaneous spelling fixes (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: constify ieee80211_ie_build_{he,eht}_oper() chandef (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Modify print_array_to_buf() to support arrays with 1-based semantics (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: debug: add beacon RSSI for debugging (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - bus: mhi: host: Fix typos in the comments (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: handle entity active flag per PHY (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: initialize dual HW bands for MLO and control them by link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852ce: set offset K of PCI PHY EQ to manual mode to improve compatibility (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852ce: fix gray code conversion for filter out EQ (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922ae: disable PCI PHY EQ to improve compatibility (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: pci: consolidate PCI basic configurations for probe and resume (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: move txbaddr/rxbaddr into struct ath12k_dp (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: allow missing memory-regions (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: fix the stack frame size warning in ath11k_vif_wow_set_wakeups (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: enable fw_wmi_diag_event hw param for WCN6750 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: Fix double free issue during SRNG deinit (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath10k: fix the stack frame size warning in ath10k_hw_scan (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath10k: fix the stack frame size warning in ath10k_remain_on_channel (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Parse the RX descriptor with a single function (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852c: rfk: remove unnecessary assignment of return value of _dpk_dgain_read() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: tweak driver architecture for impending MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: refactor STA related func ahead for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: refactor VIF related func ahead for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: read link_sta corresponding to the link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: read bss_conf corresponding to the link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: rename rtw89_sta to rtw89_sta_link ahead for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: rename rtw89_vif to rtw89_vif_link ahead for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-56609}
  - wifi: rtw88: Constify some arrays and structs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: rfk: update firmware debug log of DACK to v2 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: rfk: add firmware debug log of IQK (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: rfk: add firmware debug log of TSSI (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922a: rfk: support firmware command RX DCK v1 format (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922a: rfk: enlarge TSSI timeout time to 20ms (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: make read-only arrays static const (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: make read-only array svc_id static const (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: remove ath9k_platform_data (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: btcoex: remove platform_data (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: eeprom: remove platform data (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: net: wireless: brcm4329-fmac: add clock description for AP6275P (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: net: wireless: brcm4329-fmac: add pci14e4,449d (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: net: wireless: brcm,bcm4329-fmac: Add CYW43439 DT binding (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: net: wireless: brcm,bcm4329-fmac: allow generic properties (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: net: wireless: brcm,bcm4329-fmac: add BCM4366 binding (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - ARM: dts: BCM5301X: Add Netgear R8000 WiFi regulator mappings (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: net: bcm4329-fmac: Add Apple properties & chips (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: bcm4329-fmac: add optional brcm,ccode-map-trivial (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: add flag for random seed during firmware download (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: Add optional lpo clock enable support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: of: Make use of irq_get_trigger_type() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: use clamp() in ar9003_aic_cal_post_process() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: move wed common utilities in wed.c (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: mtk_ppe: prefer newly added l2 flows (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: add code for offloading flows from wlan devices (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: support creating mac address based offload entries (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: remove bridge flow offload type entry support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: rework hardware flow table management (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: allocate struct mtk_ppe separately (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: support TC_SETUP_BLOCK for PPE offload (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: add ipv6 flow offload support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: implement flow offloading to WED devices (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: arm: mediatek: document the pcie mirror node on MT7622 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: arm: mediatek: document WED binding for MT7622 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - arm64: dts: mediatek: mt7622: add support for coherent DMA (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: add support for coherent DMA (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: net: mediatek: add optional properties for the SoC ethernet core (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: avoid creating duplicate offload entries (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (CKI Backport Bot) [RHEL-91108]
  - jiffies: Define secs_to_jiffies() (CKI Backport Bot) [RHEL-91108]
  - smp,csd: Throw an error if a CSD lock is stuck for too long (Waiman Long) [RHEL-16867]
  - smp: Reduce NMI traffic from CSD waiters to CSD destination (Waiman Long) [RHEL-16867]
  - smp: Reduce logging due to dump_stack of CSD waiters (Waiman Long) [RHEL-16867]
  - locking/csd_lock: Remove per-CPU data indirection from CSD lock debugging (Waiman Long) [RHEL-16867]
  - smp: Fix offline cpu check in flush_smp_call_function_queue() (Waiman Long) [RHEL-16867]
  - vmxnet3: unregister xdp rxq info in the reset path (Izabela Bakollari) [RHEL-30011]
  - acct: perform last write from workqueue (Waiman Long) [RHEL-83160] {CVE-2025-21846}
  - kernel/acct.c: use dedicated helper to access rlimit values (Waiman Long) [RHEL-83160]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-590.el9]
changelog:
  - cifs: Fix integer overflow while processing acdirmax mount option (Paulo Alcantara) [RHEL-87940] {CVE-2025-21963}
  - perf test: Update event_groups test to use instructions (Michael Petlan) [RHEL-80165]
  - xfrm: Support ESN context update to hardware for TX (CKI Backport Bot) [RHEL-86504]
  - redhat: Add packing_test to mod-internal.list (Petr Oros) [RHEL-92666]
  - redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-92666]
  - lib: packing: catch kunit_kzalloc() failure in the pack() test (Petr Oros) [RHEL-92666]
  - lib: packing: document recently added APIs (Petr Oros) [RHEL-92666]
  - lib: packing: add pack_fields() and unpack_fields() (Petr Oros) [RHEL-92666]
  - lib: packing: demote truncation error in pack() to a warning in __pack() (Petr Oros) [RHEL-92666]
  - lib: packing: create __pack() and __unpack() variants without error checking (Petr Oros) [RHEL-92666]
  - lib: packing: use GENMASK() for box_mask (Petr Oros) [RHEL-92666]
  - lib: packing: use BITS_PER_BYTE instead of 8 (Petr Oros) [RHEL-92666]
  - lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (Petr Oros) [RHEL-92666]
  - lib: packing: add additional KUnit tests (Petr Oros) [RHEL-92666]
  - lib: packing: add KUnit tests adapted from selftests (Petr Oros) [RHEL-92666]
  - lib: packing: duplicate pack() and unpack() implementations (Petr Oros) [RHEL-92666]
  - lib: packing: add pack() and unpack() wrappers over packing() (Petr Oros) [RHEL-92666]
  - lib: packing: remove kernel-doc from header file (Petr Oros) [RHEL-92666]
  - lib: packing: adjust definitions and implementation for arbitrary buffer lengths (Petr Oros) [RHEL-92666]
  - lib: packing: refuse operating on bit indices which exceed size of buffer (Petr Oros) [RHEL-92666]
  - lib: packing: remove MODULE_LICENSE in non-modules (Petr Oros) [RHEL-92666]
  - Documentation: core-api: packing: correct spelling (Petr Oros) [RHEL-92666]
  - lib: packing: replace bit_reverse() with bitrev8() (Petr Oros) [RHEL-92666]
  - Revert "SUNRPC: Revert e0a912e8ddba" (Benjamin Coddington) [RHEL-92060]
  - ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S16 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek - Fixed ASUS platform headset Mic issue (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Use devres for remove as well (Jaroslav Kysela) [RHEL-80682]
  - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (Jaroslav Kysela) [RHEL-80682]
  - tools headers: Update the linux/unaligned.h copy with the kernel sources (Jaroslav Kysela) [RHEL-80682]
  - soundwire: take in count the bandwidth of a prepared stream (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() (Jaroslav Kysela) [RHEL-80682] {CVE-2025-39930}
  - ALSA: hda/realtek: Bass speaker fixup for ASUS UM5606KA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: separate DJM-A9 cap lvl options (Jaroslav Kysela) [RHEL-80682]
  - PCI: pci_ids: add INTEL_HDA_PTL_H (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: convert to SYSTEM_SLEEP_PM_OPS (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt722-sdca: add missing readable registers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: Fix maximum ADC Volume (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS B5405 and B5605 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS B3405 and B3605 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for various ASUS Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS ROG Strix GA603 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS ROG Strix G814 Laptop using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ASoC: ops: Consistently treat platform_max as control value (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt1320: set wake_capable = 0 explicitly (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: update ALC222 depop optimize (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: Add jack delay debounce after suspend (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: wsa884x: report temps to hwmon in millidegree of Celsius (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usx2y: validate nrpacks module parameter on probe (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Avoid module auto-load handling at event delivery (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix Asus Z13 2025 audio (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Remove (revert) duplicate Ally X config (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix microphone regression on ASUS N705UD (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs35l56: Prevent races when soft-resetting using SPI control (Jaroslav Kysela) [RHEL-80682]
  - firmware: cs_dsp: Remove async regmap writes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: warn both sdw and pch dmic are used (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: don't check number of sdw links when set dmic_fixup (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl: Rename stream name of SAI DAI driver (Jaroslav Kysela) [RHEL-80682]
  - ASoC: es8328: fix route from DAC to output (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2764: Set the SDOUT polarity correctly (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2764: Fix power control mask (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Drop UMP events when no UMP-conversion is set (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2770: Fix volume scale (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/cirrus: Reduce codec resume time (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/cirrus: Correct the full scale volume set logic (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: imx-audmix: remove cpu_mclk which is from cpu dai device (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fixup ALC225 depop procedure (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs35l41: Fix acpi_device_hid() not found (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Add branch prediction hint in ACP IRQ handler (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Drop unused includes from Vangogh driver (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Add post_fw_run_delay ACP quirk (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: revise typo of rt713_vb_l2_rt1320_l13 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: revise typo of rt712_vb + rt1320 support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: hda-intel: add Panther Lake-H support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: pci-ptl: Add support for PTL-H (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: intel-dsp-config: Add PTL-H support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2781: drop a redundant code (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers (Jaroslav Kysela) [RHEL-80682] {CVE-2025-21870}
  - ASoC: cs35l41: Fallback to using HID for system_name if no SUB is available (Jaroslav Kysela) [RHEL-80682]
  - ASoC: arizona/madera: use fsleep() in up/down DAPM event delays. (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Limit mic boost on Positivo ARN50 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils.c: add missing dlc->of_node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB] (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-mtl-match: declare adr as ull (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-tgl-match: declare adr as ull (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add support for Fatcat board with BT offload enabled in PTL platform (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S14 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_micfil: Enable default case in micfil_set_quality() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix headset detection failure due to unstable sort (Jaroslav Kysela) [RHEL-80682]
  - ALSA: pcm: use new array-copying-wrapper (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codec: es8316: "DAC Soft Ramp Rate" is just a 2 bit control (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: acp: Fix possible deadlock (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix quirk matching for Legion Pro 7 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: renesas: SND_SIU_MIGOR should depend on DMADEVICES (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (Jaroslav Kysela) [RHEL-80682]
  - ASoC: da7213: Initialize the mutex (Jaroslav Kysela) [RHEL-80682]
  - ASoC: use to_platform_device() instead of container_of() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: acp: Support microphone from Lenovo Go S (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx8m: Add entry for new 8M Plus revision (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx8: Add entries for new 8QM and 8QXP revisions (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx: Add mach entry to select cs42888 topology (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: select CONFIG_DMA_SHARED_BUFFER (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx8m: add SAI2,5,6,7 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix return code from poll ops (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix incorrect resp->opcode retrieval (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix meter_levels type to __le32 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: ES8326: Improved PSRR (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: return error value in asrc_m2m_device_run() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: only handle pairs for m2m in the suspend (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix hwdep read ops types (Jaroslav Kysela) [RHEL-80682]
  - ALSA: scarlett2: Add device_setup option to use FCP driver (Jaroslav Kysela) [RHEL-80682]
  - ALSA: FCP: Add Focusrite Control Protocol driver (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Support for Ideapad hotkey mute LEDs (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dapm: add support for preparing streams (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-dai: add snd_soc_dai_prepare() and use it internally (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Add delay quirk for USB Audio Device (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Transfer firmware in two chunks (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Enable headset mic on Positivo C6400 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Make tied_device=0 as default / unknown (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-dapm: remove !card check from snd_soc_dapm_set_bias_level() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: fsl,micfil: Add compatible string for i.MX943 platform (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_micfil: Add i.MX943 platform support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Add AZX_DCAPS_NO_TCSEL flag for Loongson HDA devices (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: Use ARRAY_SIZE() to calculate PEB2466_TLV_SIZE (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: Use str_yes_no() to improve bdw_dump() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-core: return 0 if np was NULL on snd_soc_daifmt_parse_clock_provider_raw() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card: use __free(device_node) for device node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: audio-graph-card: use __free(device_node) for device node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: nau8824: fix max volume for Speaker output (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: fsl,mqs: Add compatible string for i.MX943 platform (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_mqs: Add i.MX943 platform support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: line6: convert timeouts to secs_to_jiffies() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Notify UMP EP and FB changes (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Allow system notification in atomic (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ump: Update rawmidi name per EP name update (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ump: Copy safe string name to rawmidi (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ump: Copy FB name string more safely (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Bump protocol version to 2.0.5 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Show substream activity in info ioctl (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Expose the tied device number in info ioctl (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix compilation of snd_hdac_adsp_xxx() helpers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card: Drop unnecessary "dai-tdm-slot-width-map" property presence check (Jaroslav Kysela) [RHEL-80682]
  - ALSA: sb: Use str_enabled_disabled() helper in info_read() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: emu10k1: Use str_yes_no() helper (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Use of_property_present() for non-boolean properties (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: Add ACPI dependency to fix build error (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rme9652: Simplify with str_yes_no() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Simplify with str_yes_no() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Add missing includes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Adjust IPC traces (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Adjust DSP status register names (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Update ASRC definition (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Improve logging of firmware loading (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Clearly state assumptions of hw_params() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Add MODULE_FIRMWARE to inform about FW (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Print IPC error messages in lower layer (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Update hda component teardown sequences (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Fix init-config parsing (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Fix theoretical infinite loop (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Fix the minimum firmware version numbers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Do not readq() u32 registers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: renesas: rz-ssi: Add a check for negative sample_space (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-card: remove card check (Jaroslav Kysela) [RHEL-80682]
  - ALSA: firewire: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - regmap: sdw-mbq: Add support for SDCA deferred controls (Jaroslav Kysela) [RHEL-80682]
  - regmap: sdw-mbq: Add support for further MBQ register sizes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Update list of entity_0 controls (Jaroslav Kysela) [RHEL-80682]
  - soundwire: SDCA: Add additional SDCA address macros (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Simplify with str_enable_disable() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: oss: Simplify with str_enabled_disabled() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: emu10k1: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hdspm: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: sonicvibes: Simplify with str_off_on() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: trident: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt5682: Support the ALC5682I-VE codec (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ens137x: Use str_on_off() helper in snd_ensoniq_proc_read() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: madera: Use str_enabled_disabled() helper function (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: Use str_yes_no() helper in atom_dump() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: Add aw88083 amplifier driver (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: Add schema for "awinic,aw88083" (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple_card: Show if link is unidirectional (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple_card: Improve debugging messages (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Make dependency on UMP clearer (Jaroslav Kysela) [RHEL-80682]
  - ALSA: Align the syntax of iov_iter helpers with standard ones (Jaroslav Kysela) [RHEL-80682]
  - ALSA: AC97: Use str_on_off() helper in snd_ac97_proc_read_main() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add a comment for alc_fixup_inv_dmic() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Split function type patching and function naming (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Add missing function type names (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Add bounds check for function address (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Clean up error messages (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Add missing header includes (Jaroslav Kysela) [RHEL-80682]
  - soundwire: amd: clear wake enable register for power off mode (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: count the bandwidth of active streams only (Jaroslav Kysela) [RHEL-80682]
  - SoundWire: pass stream to compute_params() (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: add lane in sdw_group_params (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: select data lane (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: check required freq accurately (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: correct clk_freq check in sdw_select_row_col (Jaroslav Kysela) [RHEL-80682]
  - Soundwire: generic_bandwidth_allocation: set frame shape on fly (Jaroslav Kysela) [RHEL-80682]
  - Soundwire: stream: program BUSCLOCK_SCALE (Jaroslav Kysela) [RHEL-80682]
  - Soundwire: add sdw_slave_get_scale_index helper (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: skip DEPREPARED streams (Jaroslav Kysela) [RHEL-80682]
  - soundwire: stream: set DEPREPARED state earlier (Jaroslav Kysela) [RHEL-80682]
  - soundwire: add lane_used_bandwidth in struct sdw_bus (Jaroslav Kysela) [RHEL-80682]
  - soundwire: mipi_disco: read lane mapping properties from ACPI (Jaroslav Kysela) [RHEL-80682]
  - soundwire: add lane field in sdw_port_runtime (Jaroslav Kysela) [RHEL-80682]
  - soundwire: bus: Move irq mapping cleanup into devres (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ad1889: Use str_enabled_disabled() helper function (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hdsp: Use str_on_off() and str_yes_no() helper functions (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: force cast for snd_pcm_format_t type (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-core: remove redundant assignment to variable ret (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: don't include '<linux/find.h>' directly (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Increase the SoundWire attach timeout (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Use gpiod_set_raw for GPIO operations (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Prepare support for updated bios patch (Jaroslav Kysela) [RHEL-80682]
  - ASoC: qcom: sdm845: add handling of secondary MI2S clock (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt715: Remove unused hda_to_sdw (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: Unify clock direction by clk_direction (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-core: tidyup ret handling for card->disable_route_checks (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: mtl-match: Add CDB35L56-EIGHT-C 8x CS35L56 without CS42L43 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: mtl-match: Add CDB35L56-EIGHT-C with aggregated speakers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: tgl-match: Add entries for CS35L56 on CDB35L56-EIGHT-C (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: sof-priv: Remove unused SOF_DAI_STREAM() and SOF_FORMATS (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: ipc4-topology: Use macro to set the EXT_PARAM_SIZE in widget setup (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: hda-pcm: Follow the pause_supported flag to drop PAUSE support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Add support for pause supported tokens from topology (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_easrc: register m2m platform device (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc: register m2m platform device (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: Add memory to memory function (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_easrc: define functions for memory to memory usage (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc: define functions for memory to memory usage (Jaroslav Kysela) [RHEL-80682]
  - ALSA: compress: Add output rate and output format support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: sonicvibes: Use str_on_off() helper in snd_sonicvibes_proc_read() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: convert rt5682.txt to dt-schema (Jaroslav Kysela) [RHEL-80682]
  - ASoC: wm8985: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: wm8904: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tpa6130a2: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tlv320aic3x: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tlv320aic31xx: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tlv320adc3xxx: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas5720: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2781: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2562: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: ssm2602: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: pcm186x: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: max98095: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: max98090: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: max98088: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: alc5632: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: alc5623: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: adau1977: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: adau1781: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: adau1761: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: ad193x: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: qcom,wcd9335: Drop number of DAIs from the header (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: wcd9335: Add define for number of DAIs (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add rt713_vb_l2_rt1320_l13 support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-lnl-match: add rt713_vb_l2_rt1320_l13 support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add rt712_vb + rt1320 support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add a dev_dbg message for the SOC_SDW_CODEC_MIC quirk (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Correct quirk for Lenovo Yoga Slim 7 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: improve the log of DAI link numbers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: reduce log level for not using internal dmic (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: correct mach_params->dmic_num (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: use for_each_of_graph_port() on graph_get_dai_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: check port reg first on graph_get_dai_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: use __free(device_node) for device node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_sai: Add sample rate constraint (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_xcvr: Add sample rate constraint (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_micfil: Switch to common sample rate constraint function (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_utils: Add function to constrain rates (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: oss: fix typo in seq_oss_init.c (Jaroslav Kysela) [RHEL-80682]
  - ALSA: cmipci: Modify the incorrect format specifier (Jaroslav Kysela) [RHEL-80682]
  - ALSA: lola: Fix typo in lola_clock.c (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: ps: add ZSC control register programming sequence (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: ps: update mach params subsystem_rev variable (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Always check capability at opening a hwdep (Jaroslav Kysela) [RHEL-80682]
  - ASoC: sdw_utils: cs_amp: Assign non-overlapping TDM masks for each codec on a bus (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs35l56: Split SoundWire DAI into separate playback and capture (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix typo in hda_sysfs.h (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ac97: Modify the incorrect format specifier (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Skip notifications unless subscribed to announce port (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Notify client and port info changes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l51: Constify struct i2c_device_id (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2781: Fix redundant logical jump (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_xcvr: Add suspend and resume support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_xcvr: Use regmap for PHY and PLL registers (Jaroslav Kysela) [RHEL-80682]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-591.el9]
changelog:
  - uki_addons: add 'fedora' SBAT suffix for UKI addons (Li Tian) [RHEL-93399]
  - Subject: net/smc: check return value of sock_recvmsg when draining clc data (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: check smcd_v2_ext_offset when receiving proposal msg (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: protect link down work from execute after lgr freed (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: Introduce IPPROTO_SMC (Mete Durlu) [RHEL-73484]
  - net/smc: expose smc proto operations (Mete Durlu) [RHEL-73484]
  - net/smc: refactoring initialization of smc sock (Mete Durlu) [RHEL-73484]
  - net/smc: change SMCR_RMBE_SIZES from 5 to 15 (Mete Durlu) [RHEL-73484]
  - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined (Mete Durlu) [RHEL-73484]
  - net/smc: implement DMB-merged operations of loopback-ism (Mete Durlu) [RHEL-73484]
  - net/smc: adapt cursor update when sndbuf and peer DMB are merged (Mete Durlu) [RHEL-73484]
  - net/smc: add operations to merge sndbuf with peer DMB (Mete Durlu) [RHEL-73484]
  - net/smc: register loopback-ism into SMC-D device list (Mete Durlu) [RHEL-73484]
  - net/smc: ignore loopback-ism when dumping SMC-D devices (Mete Durlu) [RHEL-73484]
  - net/smc: mark optional smcd_ops and check for support when called (Mete Durlu) [RHEL-73484]
  - net/smc: implement DMB-related operations of loopback-ism (Mete Durlu) [RHEL-73484]
  - net/smc: implement ID-related operations of loopback-ism (Mete Durlu) [RHEL-73484]
  - redhat/configs: Add SMC_LO config option (Mete Durlu) [RHEL-73484]
  - net/smc: introduce loopback-ism for SMC intra-OS shortcut (Mete Durlu) [RHEL-73484]
  - net/smc: decouple ism_client from SMC-D DMB registration (Mete Durlu) [RHEL-73484]
  - net/smc: Avoid -Wflex-array-member-not-at-end warnings (Mete Durlu) [RHEL-73484]
  - net/smc: make smc_hash_sk/smc_unhash_sk static (Mete Durlu) [RHEL-73484]
  - net/smc: change the term virtual ISM to Emulated-ISM (Mete Durlu) [RHEL-73484]
  - net/smc: fix incorrect SMC-D link group matching logic (Mete Durlu) [RHEL-73484]
  - net/smc: fix invalid link access in dumping SMC-R connections (Mete Durlu) [RHEL-73484]
  - net/smc: manage system EID in SMC stack instead of ISM driver (Mete Durlu) [RHEL-73484]
  - net/smc: disable SEID on non-s390 archs where virtual ISM may be used (Mete Durlu) [RHEL-73484]
  - net/smc: support extended GID in SMC-D lgr netlink attribute (Mete Durlu) [RHEL-73484]
  - net/smc: compatible with 128-bits extended GID of virtual ISM device (Mete Durlu) [RHEL-73484]
  - net/smc: define a reserved CHID range for virtual ISM devices (Mete Durlu) [RHEL-73484]
  - net/smc: introduce virtual ISM device support feature (Mete Durlu) [RHEL-73484]
  - net/smc: support SMCv2.x supplemental features negotiation (Mete Durlu) [RHEL-73484]
  - net/smc: unify the structs of accept or confirm message for v1 and v2 (Mete Durlu) [RHEL-73484]
  - net/smc: introduce sub-functions for smc_clc_send_confirm_accept() (Mete Durlu) [RHEL-73484]
  - net/smc: rename some 'fce' to 'fce_v2x' for clarity (Mete Durlu) [RHEL-73484]
  - net/smc: fix missing byte order conversion in CLC handshake (Mete Durlu) [RHEL-73484]
  - net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty (Mete Durlu) [RHEL-73484]
  - net/smc: add sysctl for max conns per lgr for SMC-R v2.1 (Mete Durlu) [RHEL-73484]
  - net/smc: add sysctl for max links per lgr for SMC-R v2.1 (Mete Durlu) [RHEL-73484]
  - net/smc: put sk reference if close work was canceled (Mete Durlu) [RHEL-73484]
  - net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc (Mete Durlu) [RHEL-73484]
  - net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT (Mete Durlu) [RHEL-73484]
  - net/smc: return the right falback reason when prefix checks fail (Mete Durlu) [RHEL-73484]
  - net/smc: fix smc clc failed issue when netdevice not in init_net (Mete Durlu) [RHEL-73484]
  - net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add (Mete Durlu) [RHEL-73484]
  - net/smc: bugfix for smcr v2 server connect success statistic (Mete Durlu) [RHEL-73484]
  - net/smc: Extend SMCR v2 linkgroup netlink attribute (Mete Durlu) [RHEL-73484]
  - net/smc: support max links per lgr negotiation in clc handshake (Mete Durlu) [RHEL-73484]
  - net/smc: support max connections per lgr negotiation (Mete Durlu) [RHEL-73484]
  - net/smc: support smc v2.x features validate (Mete Durlu) [RHEL-73484]
  - net/smc: add vendor unique experimental options area in clc handshake (Mete Durlu) [RHEL-73484]
  - net/smc: support smc release version negotiation in clc handshake (Mete Durlu) [RHEL-73484]
  - net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT (Mete Durlu) [RHEL-73484]
  - net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK (Mete Durlu) [RHEL-73484]
  - net/smc: Scan from current RMB list when no position specified (Mete Durlu) [RHEL-73484]
  - net/smc: Reset connection when trying to use SMCRv2 fails. (Mete Durlu) [RHEL-73484]
  - smc: Fix use-after-free in tcp_write_timer_handler(). (Mete Durlu) [RHEL-73484]
  - smc: preserve const qualifier in smc_sk() (Mete Durlu) [RHEL-73484]
  - net/smc: Use percpu ref for wr tx reference (Mete Durlu) [RHEL-73484]
  - net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link() (Mete Durlu) [RHEL-73484]
  - vlan: enforce underlying device type (Guillaume Nault) [RHEL-87883] {CVE-2025-21920}
  - dm: fix copying after src array boundaries (Benjamin Marzinski) [RHEL-92761]
  - dm: add missing unlock on in dm_keyslot_evict() (Benjamin Marzinski) [RHEL-92761]
  - dm: always update the array size in realloc_argv on success (Benjamin Marzinski) [RHEL-92761]
  - dm-integrity: fix a warning on invalid table line (Benjamin Marzinski) [RHEL-92761]
  - dm-bufio: don't schedule in atomic context (Benjamin Marzinski) [RHEL-92761]
  - dm-ebs: fix prefetch-vs-suspend race (Benjamin Marzinski) [RHEL-92761]
  - dm-verity: fix prefetch-vs-suspend race (Benjamin Marzinski) [RHEL-92761]
  - dm-integrity: fix non-constant-time tag verification (Benjamin Marzinski) [RHEL-92761]
  - dm cache: support shrinking the origin device (Benjamin Marzinski) [RHEL-56106]
  - dm cache: prevent BUG_ON by blocking retries on failed device resumes (Benjamin Marzinski) [RHEL-56106]
  - dm: fix unconditional IO throttle caused by REQ_PREFLUSH (Benjamin Marzinski) [RHEL-92761]
  - dm-integrity: set ti->error on memory allocation failure (Benjamin Marzinski) [RHEL-92761]
  - NFSv4: Don't check for OPEN feature support in v4.1 (Scott Mayhew) [RHEL-83435]
  - MAINTAINERS: Update maintainers for crypto/marvell (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - suppress auth failure screaming due to negative tests (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - Remove unused otx2_cpt_print_uc_dbg_info (Vladis Dronov) [RHEL-74335]
  - crypto: drivers - Use str_enable_disable-like helpers [partial] (Vladis Dronov) [RHEL-74335]
  - crypto: marvell - replace deprecated PCI functions (Vladis Dronov) [RHEL-74335]
  - PCI: Make pcim_request_all_regions() a public function (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx* - Select CRYPTO_AUTHENC [partial] (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - select CONFIG_NET_DEVLINK (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - Fix authenc setkey (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - Remove custom swap functions in favor of built-in sort swap (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - update CPT inbound inline IPsec mailbox (Vladis Dronov) [RHEL-74335]
  - selftests: net: fdb_notify: Add a test for FDB notifications (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Add kill_process (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Move checks from forwarding/lib.sh here (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Move tests_run from forwarding/lib.sh here (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Move logging from forwarding/lib.sh here (Ivan Vecera) [RHEL-78780]
  - selftests: net: include lib/sh/*.sh with lib.sh (Ivan Vecera) [RHEL-78780]
  - selftests: mptcp: include net_helper.sh file (Ivan Vecera) [RHEL-78780]
  - selftests: mptcp: include lib.sh file (Ivan Vecera) [RHEL-78780]
  - selftests: forwarding: lib: Allow passing PID to stop_traffic() (Ivan Vecera) [RHEL-78780]
  - selftests: forwarding: Add a fallback cleanup() (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Introduce deferred commands (Ivan Vecera) [RHEL-78780]
  - selftests: forwarding: Convert log_test() to recognize RET values (Ivan Vecera) [RHEL-78780]
  - ndo_fdb_del: Add a parameter to report whether notification was sent (Izabela Bakollari) [RHEL-78780]
  - ndo_fdb_add: Add a parameter to report whether notification was sent (Izabela Bakollari) [RHEL-78780]
  - bonding: assign random address if device address is same as bond (Hangbin Liu) [RHEL-93062]
  - ice: Fix deinitializing VF in error path (Petr Oros) [RHEL-87626] {CVE-2025-21883}
  - ice: add E830 HW VF mailbox message limit support (Petr Oros) [RHEL-87626]
  - perf test stat_all_pmu.sh: Correctly check 'perf stat' result (Michael Petlan) [RHEL-81954]
  - perf test: Extra verbosity and hypervisor skip for tpebs test (Michael Petlan) [RHEL-81954]
  - perf test: Tag parallel failing shell tests with "(exclusive)" (Michael Petlan) [RHEL-81954]
  - perf test: Ignore security failures in all PMU test (Michael Petlan) [RHEL-81954]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-592.el9]
changelog:
  - drm: remove driver date from struct drm_driver and all drivers (Robert Foss) [RHEL-75950]
  - overflow: Introduce overflows_type() and castable_to_type() (Robert Foss) [RHEL-75950]
  - ASoC: hdmi-codec: move no_capture_mute to struct hdmi_codec_pdata (Robert Foss) [RHEL-75950]
  - ASoC: hdmi-codec: pass data to get_dai_id too (Robert Foss) [RHEL-75950]
  - kfifo: fix typos in kernel-doc (Robert Foss) [RHEL-75950]
  - kfifo: add kfifo_dma_out_prepare_mapped() (Robert Foss) [RHEL-75950]
  - kfifo: pass offset to setup_sgl_buf() instead of a pointer (Robert Foss) [RHEL-75950]
  - kfifo: rename l to len_to_end in setup_sgl() (Robert Foss) [RHEL-75950]
  - kfifo: remove support for physically non-contiguous memory (Robert Foss) [RHEL-75950]
  - kfifo: add kfifo_out_linear{,_ptr}() (Robert Foss) [RHEL-75950]
  - kfifo: introduce and use kfifo_skip_count() (Robert Foss) [RHEL-75950]
  - kfifo: drop __kfifo_dma_out_finish_r() (Robert Foss) [RHEL-75950]
  - arm64/efistub: Clean up KASLR logic (Lenny Szubowicz) [RHEL-33066]
  - efi/libstub: Cast away type warning in use of max() (Lenny Szubowicz) [RHEL-33066]
  - efi/libstub: fix efi_random_alloc() to allocate memory at alloc_min or higher address (Lenny Szubowicz) [RHEL-33066]
  - x86/efistub: Remap kernel text read-only before dropping NX attribute (Lenny Szubowicz) [RHEL-33066]
  - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-33066]
  - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-33066]
  - libstub: Fix compilation warning for rv32 (Lenny Szubowicz) [RHEL-33066]
  - arm64: libstub: Move KASLR handling functions to kaslr.c (Lenny Szubowicz) [RHEL-33066]
  - crypto: tegra - Fix IV usage for AES ECB (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Fix format specifier in (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Use HMAC fallback when keyslots are full (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Reserve keyslots to allocate dynamically (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Set IV to NULL explicitly for AES ECB (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Fix CMAC intermediate result handling (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Fix HASH intermediate result handling (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Transfer HASH init function to crypto engine (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - check return value for hash do_one_req (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - finalize crypto req on error (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Do not use fixed size buffers (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Use separate buffer for setkey (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - remove unneeded crypto_engine_stop() call (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - remove redundant error check on ret (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: engine - Remove prepare/unprepare request (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: iaa - Do not clobber req->base.data (Vladis Dronov) [RHEL-87768]
  - crypto: iaa - Move compression CRC into request object (Vladis Dronov) [RHEL-87768]
  - crypto: iaa - Test the correct request flag (Vladis Dronov) [RHEL-87768]
  - MAINTAINERS: Add Vinicius Gomes to MAINTAINERS for IAA Crypto (Vladis Dronov) [RHEL-87768]
  - crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async' (Vladis Dronov) [RHEL-87768]
  - scsi: target: iscsi: Fix timeout on deleted connection (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: tcm_loop: Fix wrong abort tag (Maurizio Lombardi) [RHEL-93481]
  - scsi: tcm_loop: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: Replace deprecated strncpy() with strscpy() (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: iscsi: Fix typos (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr() (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: spc: Fix RSOC parameter data header size (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: core: Add line break to status show (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: tcmu: Constify some structures (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: Fix incorrect function name in pscsi_create_type_disk() (Maurizio Lombardi) [RHEL-93481]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-13
changelog:
  - Handle symvers.xz in kabi.attr (#2209253).
  - Fix indirect __crc_* sumbols parsing in find-provides.ksyms
    and find-requires.ksyms to avoid matching multiple sections
    producing bogus duplicate provides for kmods that have both __kcrctab
    and __kcrctab_gpl sections (#2115811, #2178935).
  - Call "readelf -R" on a correct section in find-requires.ksyms.
  - Rewrite section data extraction in find-provides.ksyms and find-requires.ksyms
    to avoid garbage at the end of extracted sections, causing unnecessary awk
    complaints (#2115811).
  - Perform section parsing inside the awk script in find-provides.ksyms
    and find-requires.ksyms to avoid hitting command line argument limit
    when handling large .rodata sections (#2178935).


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-15
changelog:
  - Use TLS on revocation notification webhook
  - Include system installed CA certificates when verifying webhook
     server certificate
  - Include the CA certificates added via configuration file option
    'trusted_server_ca'
    Resolves: RHEL-78057
    Resolves: RHEL-78313
    Resolves: RHEL-78316


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-3
changelog:
  - Fix Keylime configuration upgrades issues introduced in last rebase
    Resolves: RHEL-475
  - Handle session close using a session manager
    Resolves: RHEL-1252
  - Add ignores for EV_PLATFORM_CONFIG_FLAGS
    Resolves: RHEL-947


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-4
changelog:
  - Update spec file to use %verify(not md5 size mode mtime) for files updated in %post scriptlets
    Resolves: RHEL-475


author: Sergio Correia <scorreia@redhat.com> - 6.5.2-4
changelog:
  - Backport upstream PR#1240 - logging: remove option to log into separate file
    Resolves: rhbz#2154584 - keylime verifier is not logging to /var/log/keylime


author: Patrik Koncity <pkoncity@redhat.com> - 7.3.0-2
changelog:
  - Keylime SELinux policy provides more restricted ports.
  - New SELinux label for ports used by keylime.
  - Adding tabrmd interfaces allow unix stream socket communication and dbus communication.
  - Allow the keylime_server_t domain to get the attributes of all filesystems.
    Resolves: RHEL-595
    Resolves: RHEL-390
    Resolves: RHEL-948


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.0~BETA-1
changelog:
  - new upstream release
  - remove upstreamed patches
  - update CCFLAGS (https://github.com/ksh93/ksh/commit/98f989afcc7)
    Resolves: #1986897


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-2
changelog:
  - Bump leapp-framework to 6.1
  - Create the /var/lib/leapp directory automatically if missing
  - Recognize configuration files with the .yaml suffix only
  - Fix CLI: allow to set falsy values as default for leapp's command options
  - Resolves: RHEL-86225


author: Matej Matuska <mmatuska@redhat.com> - 0.21.0-4
changelog:
  - Require leapp-framework 6.0+
  - Update leapp-deps package to satisfy leapp-framework-dependencies 6
  - Add dependency on libdb-utils
  - Enable upgrade for systems with LUKS bound to Clevis with TPM 2.0 token
  - Adjust resource limitations for leapp to be able to perform the upgrade
  - Cap max size of the sparse files to 1TiB for storage with large amount of free space
  - Check that detected Intel CPU microarchitecture is supported on target system
  - Fix the report when handling broken parsing of kernel cmdline
  - Generate proper error message instead of ModelViolationError when parsing invalid repository definition
  - Handle default kernel cmdline when multiple boot entries for the default kernel are defined
  - Migrate Ruby IRB during the upgrade
  - Migrate pam_userdb backend during the upgrade
  - Skip checking of (PKI) `directory-hash` dir to speedup the upgrade process and clean logs
  - Update leapp upgrade data files
  - Resolves: RHEL-57043


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-5
changelog:
  - Obsolete RHEL9 GPG key signed with SHA1
  - Activate LVM VGs with `--sysinit` option to correct the use in the upgrade initramfs
  - Fix output of commands executed inside systemd-nspawn containers
  - Fix pes events scanner crashing when there are duplicate packages in the received instructions
  - Fix pes events scanner not respecting user’s transaction configuration
  - Fix remediation instructions for deprecated NM configuration
  - Fix storage scanner crashing when command outputs contain colon character
  - Minor improvements in preupgrade reports
  - Resolves: RHEL-57043, RHEL-31428, RHEL-33373, RHEL-69829, RHEL-71517


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-6
changelog:
  - Detect XFS file systems with problematic parameters
  - Raise an inhibitor if unsupported target version supplied instead of error
  - Prevent a possible crash with LiveMode when adding the upgrade boot entry on systems with LVM
  - Resolves: RHEL-57043, RHEL-52309, RHEL-60034


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-1
changelog:
  - Rebase to new upstream 0.22.0
  - Minor updates in generated reports
  - Cover upgrades for MySQL and PostgreSQL databases
  - Detect OpenSSL engines configured in /etc/pki/tls/openssl.cnf
  - Detect deprecated network-scripts (ifcfg) files
  - Detect whether subscribed systems are using SCA
  - Inform user about Libdb removal if present
  - Check and handle upgrades with custom crypto policies
  - Update checks for SAP HANA
  - Resolves: RHEL-57043, RHEL-35618, RHEL-36661, RHEL-62689, RHEL-68309, RHEL-69831, RHEL-77169, RHEL-78396


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-2
changelog:
  - Require leapp-framework >= 6.1
  - Simplified use of the LiveMode experimental feature with additional enhancements
  - Ensure the leapp-upgrade-el9toel10 RPM is not touched during the upgrade transaction
  - Create proper error message when swap of RHUI clients fails
  - Fix the check of deprecated PCI devices and drivers
  - Add RHEL 10.1 product certificates
  - Gracefully handle CentOS OS versioning style
  - Introduced the --enable-experimental-feature to simplify use of experimental features
  - Manage RPM GPG keys during the upgrade respecting used linux distributions
  - Prevent a crach during post-upgrade phases when no custom SELinux modules needs to be migrated
  - Update leapp upgrade data files
  - Minor fixes in reports
  - Resolves: RHEL-49402, RHEL-72544, RHEL-77175, RHEL-80334, RHEL-80335, RHEL-80336, RHEL-80550, RHEL-86689


author: Karolina Kula <kkula@redhat.com> - 0.22.0-3
changelog:
  - Fix parsing of the kernel cmdline
  - Require leapp data with provided_data_streams 4.0+
  - Respect the release_id of the OS when processing DNF repositories to apply correct mapping for CentOS Stream
  - Resolves: RHEL-80336


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-1
changelog:
  - Rebase to the latest upstream release 2.28
    Resolves: rhbz#2123346
  - Add dependency on device-mapper-multipath to libblockdev-mpath
    Resolves: rhbz#2121072
  - Fix spec issues found by rpminspect
    Resolves: rhbz#2116544


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-14
changelog:
  - tests: Fix expected extended partition flags with new parted
    Related: rhbz#2109026
  - mdraid: Fix copy-paste error when checking return value
    Related: rhbz#2109026


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-19
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Vishal Vijayraghavan <vvijayra AT redhat DOT com> - 1:2.1.3-1
changelog:
  - New release of liberation-fonts 2.1.3
  - Resolves:rh#1464310 : Tilded G not works with Liberation Sans and Serif


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Laszlo Ersek <lersek@redhat.com> - 1:1.50.1-5
changelog:
  - let "guestfish -i" recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable quickcheck; we now use "-cpu max" (upstream 30f74f38bd6e)
    resolves: rhbz#2209279


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard W.M. Jones <rjones@redhat.com> - 8.2-1
changelog:
  - Rebuild for RHEL AV 8.2.
  - Include ntfs-3g-system-compression plugin.
    resolves: rhbz#1705234, rhbz#1796073


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Adam Borowski <kilobyte@angband.pl> - 1.11-1
changelog:
  - Update to version 1.11.
  - Disable enumerable_thread_specific_access_0_drd
  - Fix internal find in radix_tree


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2173674)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187171


author: Sahana Prasad <sahana@redhat.com> - 4.9-5
changelog:
  - Just bumping up the version to include bugs for CVE-2023-2295. There is no
    code fix for it. Fix for it is including the code fix for CVE-2023-30570.
  - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
    Red Hat Enterprise Linux
  - Resolves: rhbz#2189777, rhbz#2190148


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Stefan Berger <stefanb@linux.ibm.com> - 0.7.5-0.20210218gite271498466
changelog:
  - Addressed UBSAN and cppcheck detected issues
  - Return proper size of ECC Parameters to pass HLK tests


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-23607, RHEL-24850, RHEL-29267, RHEL-30842, RHEL-53963
      RHEL-54325, RHEL-54326, RHEL-55240, RHEL-64341, RHEL-65372
      RHEL-65780, RHEL-65844, RHEL-67702, RHEL-67836, RHEL-68614
      RHEL-69417


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69938)
  - qemu: tpm: do not update profile name for transient domains (RHEL-71072)
  - qemu: Enable I/O APIC if needed (RHEL-65844)
  - cpu_map: Sort data files in meson.build (RHEL-70052)
  - sync_qemu_models_i386: Update meson.build (RHEL-70052)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70052)
  - cpu_map: Add 486-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70052)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70052)
  - cpu_map: Add n270-v1 CPU model (RHEL-70052)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70052)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70052)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70052)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70052)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70052)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70052)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70052)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-7122)
  - qemu: Add support for direct and extended tlbflush features (RHEL-7122)
  - conf: refactor hyperv features formatting (RHEL-7122)
  - conf: Adjust hyperv tlbflush formatting (RHEL-7122)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73085)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68064)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-73504)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-73504)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74041)
  - storage_file: de-modularize the local file backend (RHEL-73507)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73507)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-7036)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75577)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-77884)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-77884)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-77884)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-77884)
  - qemuProcessHandleIOError: Rename local variables (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-77884)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-77884)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-77884)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-77884)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-77884)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-77884)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-77884)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-77884)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-73315)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-73315)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-73315)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-37519)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-37519)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-37519)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-79168)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-79168)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-79095)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-79095)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-79095)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-79095)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-79095)
  - conf: change virDomainHostdevInsert() to return void (RHEL-69455)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-69455)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-69455)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-69455)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-69455)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-69455)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-69455)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-69455)
  - qemu: complete vhostuser + passt support (RHEL-69455)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-69455)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-69455)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-69455)
  - utils: Canonicalize paths before comparing them (RHEL-79166)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-8
changelog:
  - remote: add sysusers file to create 'libvirt' group (RHEL-81749)
  - qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU (RHEL-81747)
  - qemu_snapshot: allow reverting to external disk only snapshot (RHEL-21549)
  - qemu: snapshot: error out early when reverting snapshot for VM with non-file disk (RHEL-30971)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-9
changelog:
  - util: introduce object for holding a system inhibitor lock (RHEL-83064)
  - src: convert drivers over to new virInhibitor APIs (RHEL-83064)
  - rpc: remove logind support for virNetDaemon (RHEL-83064)
  - util: fix off-by-1 in inhibitor constants (RHEL-83064)
  - util: don't attempt to acquire logind inhibitor if not requested (RHEL-83064)
  - network: Free inhibitor in networkStateCleanup() (RHEL-83064)
  - conf: introduce support for multiple ACPI tables (RHEL-81041)
  - src: validate permitted ACPI table types in libxl/qemu drivers (RHEL-81041)
  - src: introduce 'raw' and 'rawset' ACPI table types (RHEL-81041)
  - qemu: support 'raw' ACPI table type (RHEL-81041)
  - libxl: support 'rawset' ACPI table type (RHEL-81041)
  - conf: support MSDM ACPI table type (RHEL-81041)
  - qemu: support MSDM ACPI table type (RHEL-81041)
  - qemuxmlconftest: Include shared memory 'net-vhostuser' test cases (RHEL-84133)
  - qemuValidateDomainDeviceDefNetwork: Require shared memory for all vhost-user interfaces (RHEL-84133)
  - qemu: process: Remove un-updated 'qemuProcessStartWarnShmem' (RHEL-84133)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-10
changelog:
  - esxConnectListAllDomains: Don't propagate failure to lookup a single domain (RHEL-80606)
  - conf: parse interface/source/@dev for all interface types (with backend type='passt') (RHEL-82539)
  - libvirt-host: Clarify/fix description of the CPU frequency field (RHEL-86197)
  - virNodeGetInfo: Improve description of the case when fake data is reported (RHEL-86197)
  - manpages: virsh: Use disclaimer from 'virNodeGetInfo()' for 'virsh nodeinfo' (RHEL-86197)
  - esx: Accept empty "path" URI component same way as "/" (RHEL-86459)
  - qemu: Rename outgoingMigration parameter in various TPM functions (RHEL-86800)
  - qemu: Properly propagate migration state to TPM cleanup code (RHEL-86800)
  - qemuDomainBlockCopyCommon: Don't revoke access to file twice on failure (RHEL-7357)
  - qemuxmlconftest: Drop s390-default-cpu-...ccw-virtio-2.7 test cases (RHEL-72976)
  - tests: add capabilities for QEMU 10.0.0 on s390x (RHEL-72976)
  - qemu: Do NOT autoadd NUMA node for s390 (RHEL-72976)
  - qemu_command: Use qemuBuildVirtioDevProps() to build cmd line for virtio-mem and virtio-pmem (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-pci-s390x.xml (RHEL-72976)
  - qemu_caps: Introduce QEMU_CAPS_DEVICE_VIRTIO_MEM_CCW (RHEL-72976)
  - qemu: Validate virtio-mem-ccw (RHEL-72976)
  - qemu: Allow virtio-mem on CCW (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-ccw-s390x.xml (RHEL-72976)
  - qemu_domain_address: fix CCW virtio-mem hotplug (RHEL-72976)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-11
changelog:
  - Add load average information type into virDomainGetGuestInfo (RHEL-88447)
  - qemu_agent: Add qemuAgentGetLoadAvg() (RHEL-88447)
  - qemu: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - qemu_capabilities: Fetch caps for virtio-mem-ccw too (RHEL-87532)
  - cpu_map: Add avx10* CPU features (RHEL-87796)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-87796)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-87796)
  - virsh: Introduce new hypervisor-cpu-models command (RHEL-11435)
  - qemu: remove nonsensical sanity check in processNetdevStreamDisconnectedEvent() (RHEL-80169)
  - qemu: make processNetDevStreamDisconnectedEvent() reusable (RHEL-80169)
  - qemu: respond to NETDEV_VHOST_USER_DISCONNECTED event (RHEL-80169)
  - qemu: put vhost-user code that's special for passt in a helper function (RHEL-80169)
  - qemu: make passt+vhostuser reconnect behave identically to passt+user (RHEL-80169)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-12
changelog:
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-89415)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-89415)
  - qemu_capabilities: query deprecated features for host-model (RHEL-89415)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-89415)
  - qemu_capabilities: filter deprecated features if requested (RHEL-89415)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-89415)
  - conf: add deprecated_features attribute (RHEL-89415)
  - redhat: Restore hunks in tests/qemucapabilitiesdata/caps_10.0.0_s390x.* (RHEL-89415)


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-2
changelog:
  - Revert "network: *un*set the firewalld zone while shutting down a network" (RHEL-61576)
  - Revert "network: support setting firewalld zone for bridge device of open networks" (RHEL-61576)
  - network: call network(Add|Remove)FirewallRules() for forward mode='open' (RHEL-61576)
  - network: a different way of supporting firewalld zone for mode='open' networks (RHEL-61576)
  - network: a different implementation of *un*setting firewalld zone when network is destroyed (RHEL-61576)


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-7036, RHEL-7122, RHEL-35752, RHEL-46870, RHEL-52314
      RHEL-60030, RHEL-60033, RHEL-64341


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Jakub Jelen <jjelen@redhat.com> - 1.1.33-4
changelog:
  - Do not build python bindings even if the python is available
  - Fix CVE-2019-13117 (#1728547)
  - Fix CVE-2019-13118 (#1728542)


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "i686-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j40  
    cd -


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "x86_64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j40  
    cd -


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Frank Crawford <frank@crawford.emu.id.au> - 7.5.4-2
changelog:
  - Add requires for perl-diagnostics (#1893671) and perl-lib (#1893503)
  - Add other requires as nothing is now automatically supplied


author: Brian C. Lane <bcl@redhat.com> 34.9.15-1
changelog:
  - tito: Add the LoraxRHELTagger from rhel8-branch (bcl)
    Related: rhbz#2070910
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2070910


author: Brian C. Lane <bcl@redhat.com> 34.9.16-1
changelog:
  - Makefile: Add local-srpm target to create a .src.rpm from HEAD (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix s390x support (bcl)
    Related: rhbz#2088631
  - mkksiso: Remove use of os.path.join (bcl)
    Related: rhbz#2088631
  - Makefile: Add mkksiso to coverage report (bcl)
    Related: rhbz#2088631
  - setup.py: Install mkksiso to /usr/bin (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix grub2 editing error (bcl)
    Related: rhbz#2088631
  - mkksiso: Rewrite to use xorriso features (bcl)
    Resolves: rhbz#2088631


author: Brian C. Lane <bcl@redhat.com> 34.9.17-1
changelog:
  - minimal.ks: Add include for architecture specific packages (bcl)
    Related: rhbz#2051548
  - livemedia.ks: Add include for architecture specific packages (bcl)
    Resolves: rhbz#2051548
  - tests: Add tests for mkksiso (bcl)
    Related: rhbz#2037015
  - mkksiso: Add kernel cmdline customization support (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Move kickstart to --ks KICKSTART (bcl)
    Related: rhbz#2037015
  - mkksiso: Add helper functions for kernel cmdline modifications (bcl)
    Related: rhbz#2037015
  - lorax.spec: Fix changelog order (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.18-1
changelog:
  - mkksiso: Set u+rw permission on extracted files and directories (bcl)
    Related: rhbz#2088631
  - lorax.spec: Fix changelog (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.19-1
changelog:
  - mkksiso: Optionally support 3 arguments or --ks (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Add -U to xorriso on ppc64le (bcl)
    Resolves: rhbz#2109665
  - mkksiso: Fix passing -iso-level to xorriso (bcl)
    Related: rhbz#2109665


author: Brian C. Lane <bcl@redhat.com> 34.9.20-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042057
  - templates: Update path to license files (bcl)
    Related: rhbz#2042057
  - templates: Update boot timeout to 5s (bcl)
    Related: rhbz#2042057


author: Brian C. Lane <bcl@redhat.com> 34.9.23-1
changelog:
  - rsyslog.conf: Set WorkDirectory to /var/lib/rsyslog (bcl)
    Resolves: rhbz#2158731
  - lorax.spec: fix changelog entry for 2132511 (bcl)
    Related: rhbz#2132511


author: Brian C. Lane <bcl@redhat.com> 34.9.26-1
changelog:
  - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl)
    Resolves: RHEL-4658
  - rsyslog.conf: Update to use current config syntax (bcl) (bcl)
    Resolves: RHEL-46857


author: Brian C. Lane <bcl@redhat.com> 34.9.27-1
changelog:
  - New lorax documentation - 34.9.27 (bcl) (bcl)
    Related: RHEL-83208
  - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl)
    Resolves: RHEL-83208
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl)
    Resolves: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Brian C. Lane <bcl@redhat.com> - 9.6-1
changelog:
  - Bump release version to 9.6 (bcl)
    Related: RHEL-69011
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-69011


author: Brian C. Lane <bcl@redhat.com> - 9.7-1
changelog:
  - Bump release version to 9.7 (bcl)
    Related: RHEL-91930
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91930


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Tom Callaway <spot@fedoraproject.org> - 33.3.1-17
changelog:
  - hack this ancient beastie to work with lua 5.4
  - maintainer, please update this to the current upstream release at your earliest convenience


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Christopher Tubbs <ctubbsii@fedoraproject.org> - 1:3.6.3-6
changelog:
  - Remove unneeded commons-logging from runtime class path (rhbz#1883751)
  - Also remove redundant commons-codec


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.31-0.1.beta
changelog:
  - New version
    Resolves: rhbz#1758783
  - Dropped no-scp, no-optimization, compile-fix, crash-fix patches (all upstreamed)
  - Dropped fgnu89-inline patch (probably not needed)


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Sandro Mani <manisandro@gmail.com> - 115-1
changelog:
  - Add -fstack-protector to LDFLAGS (since we carry -D_FORTIFY_SOURCE=2 in cflags, see https://sourceforge.net/p/mingw-w64/bugs/818/)


author: Sandro Mani <manisandro@gmail.com> - 140-1
changelog:
  - Don't unset _PREFIX in mingw-env macro, it leads to ${_PREFIX}
    being empty when evaluated the lines above


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.2
changelog:
  - Set version to 104.0.2
  - BZ#2084608 - Fix mismatched allocation function
  - BZ#2084613 - qga-win: race condition in build


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.1
changelog:
  - Set version to 105.0.1
  - Remove redundant package
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.2
changelog:
  - Set version to 105.0.2
  - Fix wrong requires
  - Fix missing patch0002
  - Remove extra Summary
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.3
changelog:
  - Set version to 105.0.3
  - BZ#2090250 - mingw-qemu-ga-win: Add Provides: bundled() to rpm packages [rhel-9]


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57013 - Rebase qemu-ga to 9.1.0
  - RHEL-57012 - guest agent public ssh injection api support for Windows
  - Set version to 109.1.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in
    oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-1
changelog:
  - Resolves: rhbz#2001852 - CVE-2021-39191 mod_auth_openidc: open redirect
                             by supplying a crafted URL in the target_link_uri
                             parameter


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3
changelog:
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-5
changelog:
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Jakub Kadlcik <frostyx@email.cz> 0.5-1
changelog:
  - Release for epel8 as well (frostyx@email.cz)
  - Require createrepo_c for the createrepo_mod package (frostyx@email.cz)
  - modulemd-merge: improve README.md file (frostyx@email.cz)
  - repo2module: improve README.md file (frostyx@email.cz)
  - dir2module: improve README.md file (frostyx@email.cz)
  - Improve README.md file (frostyx@email.cz)
  - createrepo_mod: improve README.md file (frostyx@email.cz)
  - Loosen the python3-libmodulemd dependency to just libmodulemd
    (frostyx@email.cz)
  - createrepo_mod: use just createrepo_c if it has built-in module support
    (frostyx@email.cz)
  - Explicitly depend on python3-setuptools (frostyx@email.cz)
  - createrepo_mod: dump modules.yaml into the correct directory
    (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6-1
changelog:
  - Generate manpages for all tools in this repository 
  - modulemd-generate-macros: add a tool for generating module-build-macros
  - modulemd_tools: add the first pieces of a python library (for internal usage only)


author: Jakub Kadlcik <frostyx@email.cz> 0.7-1
changelog:
  - Generate manpages on the fly
  - Automated test builds incl. Docker/Travis
  - Fix PEP8 in all tools
  - modulemd_tools: temporarily skip some tests on EPEL8 or Fedora
  - Drop libmodulemd dependency in favor of python3-libmodulemd


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.4-30
changelog:
  - Keep drop-down menus on the same monitor as the pull-down button with
    Xinerama
    Resolves: RHEL-92832


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com>) - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-10
changelog:
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95814


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Gris Ge <fge@redhat.com> - 2.2.35-1
changelog:
  - Upgrade to 2.2.35
  - Fix gen_diff on VLAN ID change. RHEL-38623
  - Fix Nmpolicy on mac-address identifier. RHEL-54292
  - Fix reapply. RHEL-50556


author: Gris Ge <fge@redhat.com> - 2.2.36-1
changelog:
  - Upgrade to 2.2.36
  - Support route source. RHEL-56258
  - Fix setting empty MPTCP flags. RHEL-38607
  - Fix gc mode on blackhole route. RHEL-56727
  - Support ipsec require-id-on-certificate. RHEL-50696
  - Reselect iface DNS if desired. RHEL-56557


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Preserve current IP setting for multiconnect profile. RHEL-61890
  - Fix profile name changing. RHEL-59239
  - IPvlan support. RHEL-43438
  - Handle ipv6.method: ignore. RHEL-58406


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 2.2.40-1
changelog:
  - Upgrade to 2.2.40
  - Do not deactivate connection when removing routes. RHEL-70138
  - Use specific libnmstate logger. RHEL-72016
  - Do not deactivate connection if mptcp flags didn't change. RHEL-53211


author: Gris Ge <fge@redhat.com> - 2.2.41-1
changelog:
  - Upgrade to 2.2.41
  - Fix the lose of OVS DB system-id. RHEL-78652
  - Support overriding interface config. RHEL-59935


author: Mingyu Shi <mshi@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support for vlan-egress-priority-map configuration. RHEL-67631
  - Support FEC. RHEL-80725
  - Support quickack. RHEL-80418


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Refer route next hop interface by MAC. RHEL-32495
  - Support reapply on mac-ref interface. RHEL-87794


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.18.1-2
changelog:
  - Add back libs and v8-devel subpackages
  - Related: RHBZ#2121126
  - Record previously fixed CVE
  - Resolves: CVE-2021-44906


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
  - Resolves: rhbz#2153714
  - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
  - Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.7.0-1
changelog:
  - Update to latest release
  - Resolves CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
  - Resolves CVE-2022-29244
  - Resolves: RHBZ#2111009


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.8.0-1
changelog:
  - Update to latest release
  - Resolves: RHBZ#2111009
  - Provide undici and cjs-module-lexer + wasi-sdk sources
  - Resolves: RBHZ#2111861


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2159389
  - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.8.1-1
changelog:
  - Update node and nghttp
  - Add fips patch
  - Fixes CVE-2023-44487 (nghttp)
  - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium)


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Fixes CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Fixes CVE-2024-25629 (c-ares)


author: Andrei Radchenko <aradchen@redhat.com>
changelog:
  - Update to version 20.18.2
    Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76363 RHEL-76554 RHEL-76540


author: Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
changelog:
  - Update to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76354


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove lua pretransaction script from spec file
    Resolves: RHEL-81122
  - Disable npm update notifications for users
    Resolves: RHEL-81079


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove obsolete lua pretransaction script from spec file
    Resolves: RHEL-81119
  - Disable npm update notifications for users
    Resolves: RHEL-81079


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Jan Staněk <jstanek@redhat.com> - 2.0.3-6
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-17
changelog:
  - fix consistency return errors. We shouldn't lock the FIPS
    token if the application asked for invalid DH parameters on
    on keygen.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-1
changelog:
  - Rebase to NSS-3.90
  - Rebase to NSPR-3.35
  - fix incorrect version values in the NSS spec file for FIPS


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jerry James <loganjerry@gmail.com> - 8.0.1-1
changelog:
  - Version 8.0.1
  - Add 0002-Catch-CompileException-in-test.patch to fix compilation of a test
  - Make generate-tarball.sh actually compress the tarball


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-86603


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.0-1
changelog:
  - Rebase to open-mv-tools 12.1.0 [bz#2121203]
  - Resolves: bz#2121203
    ([ESXi][RHEL9]Open-vm-tools release 12.1.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1
changelog:
  - Rebase to open-vm-tools 12.1.5 [bz#2150190]
  - Resolves: bz#2150190
    ([ESXi][RHEL9]Open-vm-tools release 12.1.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
changelog:
  - Rebase to open-vm-tools 12.2.0 [bz#2177086]
  - Resolves: bz#2177086
    ([ESXi][RHEL9]open-vm-tools version 12.2.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-2
changelog:
  - ovt-Use-https-instead-of-http-for-documentation-links.patch [bz#2208160]
  - Resolves: bz#2208160
    ([ESXi][RHEL9] URL in service unit files are started from http instead of https)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-3
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2215566]
  - Resolves: bz#2215566
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-br-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
changelog:
  - Rebaer to open-vm-tools 12.2.5
  - Resolves: bz#2214862
    ([ESXi][RHEL9]open-vm-tools version 12.2.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2
changelog:
  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236544]
  - Resolves: bz#2236544
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2446]
  - Resolves: RHEL-2446
    ([RHEL9.3][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
changelog:
  - Rebase to 12.3.5-1 [RHEL-15058]
  - Fixed CVE-2023-34058 [RHEL-14653]
  - Fixed CVE-2023-34059 [RHEL-14687]
  - Resolves: RHEL-15058
    ([ESXi][RHEL9]open-vm-tools version 12.3.5 has been released - please rebase)
  - Resolves: RHEL-14653
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-9.4.0])
  - Resolves: RHEL-14687
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-9.4.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
changelog:
  - ovt-Restart-tools-on-failure.patch [RHEL-15346]
  - Resolves: RHEL-15346
    (Add Restart=on-failure to vmtoolsd.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30341
  - Resolves: RHEL-30341
    ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-35543]
  - Resolves: RHEL-35543
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.5 [RHEL-45547]
  - Resolves: RHEL-45547
    ([ESXi][RHEL9] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63096]
  - Resolves: RHEL-63096
    ([ESXi][RHEL9] open-vm-tools version 12.5.0 has been released - please rebase)


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-32
changelog:
  - Fix pkcs11 issue with the recent changes
  - Delete unnecessary log messages from previous compl-dh patch
  - Add ssh_config man page explanation on rhbz#2068423
  - Resolves: rhbz#2207793, rhbz#2209096


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Benedikt Bongartz <bongartz@redhat.com> - 0.95.0
changelog:
  - add observability user that is part of the systemd-journal group
  - add opentelemetry collector config folder (`/etc/opentelemetry-collector/configs`)
  - add opentelemetry collector default config
  - add microshift manifests


author: Felix Kolwa <fkolwa@redhat.com> - 0.102.1-4
changelog:
  - Fix SELinux policy resource names
  - Use sources for SELinux resources in spec file
  - Bump revision


author: Felix Kolwa <fkolwa@redhat.com> - 0.107.0-1
changelog:
  - Version bump to 0.107.0
  - Reset release to 1
  - Update addresses the following CVEs:
  - CVE-2024-34155
  - CVE-2024-34156
  - CVE-2024-42368


author: Kseniia Nivnia <knivnia@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs:
  - CVE-2024-45338
  - CVE-2024-45337


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-79113


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify post-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-81967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Add toolchain go1.23.7
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-81359


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Remove explicit go toolchain dependency
  - Update addresses CVE-2025-29786
    Resolves: RHEL-83841


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-82967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85033


author: Matej Tyc <matyc@redhat.com> - 2.0.0-5
changelog:
  - Fix handling of content archives
    Resolves: rhbz#1996129
  - Fix handling of content fingerprint
    Resolves: rhbz#1993065
  - Fix crash when a previously selected hardening has been cancelled
    Resolves: rhbz#2014108
  - Pull latest translations


author: Matej Tyc <matyc@redhat.com> - 2.0.0-8
changelog:
  - Introduce unified help support
    Resolves: rhbz#2043512
  - Update translations
    Resolves: rhbz#2017374


author: Matej Tyc <matyc@redhat.com> - 2.0.0-9
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1999587
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2042334


author: Matej Tyc <matyc@redhat.com> - 2.0.0-12
changelog:
  - Remove the firstboot remediation feature completely.
    We can't have it, while maintaining the standard UX.
    Resolves: rhbz#2065751


author: Matej Tyc <matyc@redhat.com> - 2.0.0-13
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129846
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2127502


author: Jan Černý <jcerny@redhat.com> - 2.0.0-17
changelog:
  - Update translations (rhbz#2189526)
  - Fix tar file extraction (rhbz#2218875)
  - Fix conflict of tftp package with "network servers" group (rhbz#2172264)


author: Victor Toso <victortoso@redhat.com> - 20221130-1
changelog:
  - Update for new release (v20221130)
    Resolves: rhbz#2135751
  - Add rhel-8.8 and rhel-9.2 prereleases
    Related: rhbz#2135751


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Alex Macdonald <almacdon@redhat.com> - 1.2.2-3
changelog:
  - Remove osgi metadata patch0 that previously added a manifest
  - Include patch (courtesy of jkang) to package as a bundle instead of a jar
  - Update maven-compiler-plugin source/target version for builds in f33


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


